Play interactive tour
Edit tourAnalysis Report #U5e74#U7ec8#U63d0#U6210#U5206#U7ea2#U6838#U5bf9#U8868@i4.bat
Overview
General Information
| Sample Name: | #U5e74#U7ec8#U63d0#U6210#U5206#U7ea2#U6838#U5bf9#U8868@i4.bat (renamed file extension from bat to exe) |
| Analysis ID: | 343504 |
| MD5: | 6665909a2652c5860fd874cb15c3991c |
| SHA1: | 84a5a2e920e8165634e510766eaa51662401a227 |
| SHA256: | 1ef7ae3509e71c3cd0904a7396831e6bd2c021f14dc5d4b2485a38ebefc3dd3d |
Most interesting Screenshot:  | |
Detection
| Score: | 72 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 100% |
Signatures
Contains functionality to bypass UAC (CMSTPLUA)
Multi AV Scanner detection for submitted file
Connects to many ports of the same IP (likely port scanning)
Tries to detect sandboxes / dynamic malware analysis system (registry check)
Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)
Uses known network protocols on non-standard ports
Abnormal high CPU Usage
Checks for available system drives (often done to infect USB drives)
Contains capabilities to detect virtual machines
Contains functionality for read data from the clipboard
Contains functionality to check if a debugger is running (IsDebuggerPresent)
Contains functionality to check if a debugger is running (OutputDebugString,GetLastError)
Contains functionality to check if a window is minimized (may be used to check if an application is visible)
Contains functionality to communicate with device drivers
Contains functionality to dynamically determine API calls
Contains functionality to launch a program with higher privileges
Contains functionality to open a port and listen for incoming connection (possibly a backdoor)
Contains functionality to query locales information (e.g. system language)
Contains functionality to retrieve information about pressed keystrokes
Contains functionality which may be used to detect a debugger (GetProcessHeap)
Creates a DirectInput object (often for capturing keystrokes)
Creates a process in suspended mode (likely to inject code)
Creates a start menu entry (Start Menu\Programs\Startup)
Detected TCP or UDP traffic on non-standard ports
Detected potential crypto function
Drops PE files
Drops PE files to the application program directory (C:\ProgramData)
Enables debug privileges
Enables security privileges
Extensive use of GetProcAddress (often used to hide API calls)
Found evasive API chain (may stop execution after checking a module file name)
Found large amount of non-executed APIs
Found potential string decryption / allocating functions
HTTP GET or POST without a user agent
IP address seen in connection with other malware
Internet Provider seen in connection with other malware
May sleep (evasive loops) to hinder dynamic analysis
Monitors certain registry keys / values for changes (often done to protect autostart functionality)
PE file contains sections with non-standard names
PE file contains strange resources
Potential key logger detected (key state polling based)
Queries the volume information (name, serial number etc) of a device
Sample execution stops while process was sleeping (likely an evasion)
Sample file is different than original file name gathered from version info
Stores files to the Windows start menu directory
Tries to load missing DLLs
Uses code obfuscation techniques (call, push, ret)
Yara signature match
Classification
Startup |
|---|
|
Malware Configuration |
|---|
| No configs have been found |
|---|
Yara Overview |
|---|
Dropped Files |
|---|
| Source | Rule | Description | Author | Strings |
|---|---|---|---|---|
| Methodology_Suspicious_Shortcut_Local_URL | Detects local script usage for .URL persistence | @itsreallynick (Nick Carr), @QW5kcmV3 (Andrew Thompson) |
|
Sigma Overview |
|---|
| No Sigma rule has matched |
|---|
Signature Overview |
|---|
Click to jump to signature section
Show All Signature Results
AV Detection: |   |
|---|
| Multi AV Scanner detection for submitted file | Show sources | ||
| Source: | Virustotal: | Perma Link | ||
| Source: | ReversingLabs: | |||
Privilege Escalation: | |
|---|
| Contains functionality to bypass UAC (CMSTPLUA) | Show sources | ||
| Source: | Code function: | 0_2_0000000180002D40 | |
Compliance: | |
|---|
| Binary contains paths to debug symbols | Show sources | ||
| Source: | Binary string: | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | Code function: | 0_2_00000001400223C0 | |
| Source: | Code function: | 1_2_00405BD6 | |
| Source: | Code function: | 1_2_0040755D | |
| Source: | Code function: | 1_2_00406532 | |
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
Networking: | |
|---|
| Connects to many ports of the same IP (likely port scanning) | Show sources | ||
| Source: | TCP traffic: | ||
| Uses known network protocols on non-standard ports | Show sources | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | TCP traffic: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | IP Address: | ||
| Source: | ASN Name: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | Code function: | 0_2_0000000140002220 | |
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Code function: | 0_2_00000001400DC700 | |
| Source: | Code function: | 0_2_00000001400900A0 | |
| Source: | Binary or memory string: | ||
| Source: | Code function: | 0_2_000000014007AAC4 | |
| Source: | Code function: | 0_2_0000000140085328 | |
| Source: | Code function: | 0_2_000000014000F35C | |
| Source: | Code function: | 0_2_000000014008F93C | |
| Source: | Process Stats: | ||
| Source: | Code function: | 1_2_00406D20 | |
| Source: | Code function: | 0_2_000000014002007C | |
| Source: | Code function: | 0_2_0000000140011818 | |
| Source: | Code function: | 0_2_0000000140076074 | |
| Source: | Code function: | 0_2_000000014010E08C | |
| Source: | Code function: | 0_2_00000001400BE1D0 | |
| Source: | Code function: | 0_2_000000014005A1C4 | |
| Source: | Code function: | 0_2_0000000140162354 | |
| Source: | Code function: | 0_2_000000014005C3D4 | |
| Source: | Code function: | 0_2_000000014007A4D8 | |
| Source: | Code function: | 0_2_00000001400365D8 | |
| Source: | Code function: | 0_2_0000000140046614 | |
| Source: | Code function: | 0_2_000000014003C644 | |
| Source: | Code function: | 0_2_000000014005A694 | |
| Source: | Code function: | 0_2_00000001400DE6A4 | |
| Source: | Code function: | 0_2_000000014004472C | |
| Source: | Code function: | 0_2_000000014000A760 | |
| Source: | Code function: | 0_2_00000001400BE798 | |
| Source: | Code function: | 0_2_000000014006C8BC | |
| Source: | Code function: | 0_2_00000001400768F8 | |
| Source: | Code function: | 0_2_0000000140074934 | |
| Source: | Code function: | 0_2_000000014002C960 | |
| Source: | Code function: | 0_2_0000000140018AB8 | |
| Source: | Code function: | 0_2_0000000140014AD0 | |
| Source: | Code function: | 0_2_000000014005EAE4 | |
| Source: | Code function: | 0_2_0000000140040B54 | |
| Source: | Code function: | 0_2_0000000140092B98 | |
| Source: | Code function: | 0_2_0000000140024BFC | |
| Source: | Code function: | 0_2_0000000140084BF4 | |
| Source: | Code function: | 0_2_0000000140090C1C | |
| Source: | Code function: | 0_2_000000014005AD18 | |
| Source: | Code function: | 0_2_0000000140078D58 | |
| Source: | Code function: | 0_2_0000000140042E18 | |
| Source: | Code function: | 0_2_0000000140018EA0 | |
| Source: | Code function: | 0_2_00000001400F0FA4 | |
| Source: | Code function: | 0_2_0000000140021100 | |
| Source: | Code function: | 0_2_000000014003910C | |
| Source: | Code function: | 0_2_0000000140029308 | |
| Source: | Code function: | 0_2_000000014005F304 | |
| Source: | Code function: | 0_2_00000001400BF304 | |
| Source: | Code function: | 0_2_0000000140097328 | |
| Source: | Code function: | 0_2_00000001400DF350 | |
| Source: | Code function: | 0_2_000000014009140C | |
| Source: | Code function: | 0_2_00000001400CB4B4 | |
| Source: | Code function: | 0_2_000000014003754C | |
| Source: | Code function: | 0_2_000000014007564C | |
| Source: | Code function: | 0_2_0000000140081668 | |
| Source: | Code function: | 0_2_000000014001D68C | |
| Source: | Code function: | 0_2_00000001401636B0 | |
| Source: | Code function: | 0_2_00000001400476E4 | |
| Source: | Code function: | 0_2_000000014002377C | |
| Source: | Code function: | 0_2_00000001400577E8 | |
| Source: | Code function: | 0_2_00000001400F1800 | |
| Source: | Code function: | 0_2_0000000140051880 | |
| Source: | Code function: | 0_2_00000001400798A4 | |
| Source: | Code function: | 0_2_00000001400638BC | |
| Source: | Code function: | 0_2_00000001401578AC | |
| Source: | Code function: | 0_2_00000001400A38D0 | |
| Source: | Code function: | 0_2_00000001400918D4 | |
| Source: | Code function: | 0_2_000000014007DA44 | |
| Source: | Code function: | 0_2_0000000140161B54 | |
| Source: | Code function: | 0_2_0000000140087CCC | |
| Source: | Code function: | 0_2_0000000140067CE4 | |
| Source: | Code function: | 0_2_0000000140159CFC | |
| Source: | Code function: | 0_2_00000001400BBD90 | |
| Source: | Code function: | 0_2_00000001400DFD94 | |
| Source: | Code function: | 0_2_0000000140041DE4 | |
| Source: | Code function: | 0_2_00000001400A1E3C | |
| Source: | Code function: | 0_2_0000000140043E5C | |
| Source: | Code function: | 0_2_000000014005BE90 | |
| Source: | Code function: | 0_2_0000000140079EC0 | |
| Source: | Code function: | 0_2_0000000140161ED4 | |
| Source: | Code function: | 0_2_00000001400B9ED4 | |
| Source: | Code function: | 0_2_00000001400BDED8 | |
| Source: | Code function: | 0_2_000000014006FF0C | |
| Source: | Code function: | 0_2_0000000140047F40 | |
| Source: | Code function: | 0_2_000000014000DF9C | |
| Source: | Code function: | 0_2_000000014006BFC4 | |
| Source: | Code function: | 0_2_000000018000C380 | |
| Source: | Code function: | 0_2_00000001800088E0 | |
| Source: | Code function: | 0_2_00000001800090C0 | |
| Source: | Code function: | 0_2_000000018000E274 | |
| Source: | Code function: | 0_2_00000001800104F0 | |
| Source: | Code function: | 0_2_0000000180016900 | |
| Source: | Code function: | 0_2_0000000180006AE0 | |
| Source: | Code function: | 1_2_004292EC | |
| Source: | Code function: | 1_2_004419AF | |
| Source: | Code function: | 1_2_0044C0C8 | |
| Source: | Code function: | 1_2_0044C0A0 | |
| Source: | Code function: | 1_2_0044017B | |
| Source: | Code function: | 1_2_0045A190 | |
| Source: | Code function: | 1_2_0041C3CB | |
| Source: | Code function: | 1_2_0041A459 | |
| Source: | Code function: | 1_2_00456650 | |
| Source: | Code function: | 1_2_0043674E | |
| Source: | Code function: | 1_2_0044C8A0 | |
| Source: | Code function: | 1_2_004509E8 | |
| Source: | Code function: | 1_2_0044C9B0 | |
| Source: | Code function: | 1_2_0044AC50 | |
| Source: | Code function: | 1_2_00454F00 | |
| Source: | Code function: | 1_2_00452FB0 | |
| Source: | Code function: | 1_2_00451150 | |
| Source: | Code function: | 1_2_0045B423 | |
| Source: | Code function: | 1_2_004575D0 | |
| Source: | Code function: | 1_2_0045B5B1 | |
| Source: | Code function: | 1_2_004015BE | |
| Source: | Code function: | 1_2_0045B68B | |
| Source: | Code function: | 1_2_0045B771 | |
| Source: | Code function: | 1_2_004159D7 | |
| Source: | Code function: | 1_2_00401999 | |
| Source: | Code function: | 1_2_00459AE0 | |
| Source: | Code function: | 1_2_00451B10 | |
| Source: | Code function: | 1_2_00459CA0 | |
| Source: | Code function: | 1_2_0040DDF1 | |
| Source: | Code function: | 1_2_0044BF30 | |
| Source: | Process token adjusted: | Jump to behavior | ||
| Source: | Code function: | ||
| Source: | Code function: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Matched rule: | ||
| Source: | Classification label: | ||
| Source: | Code function: | 1_2_00414942 | |
| Source: | Code function: | 1_2_00407CF5 | |
| Source: | Code function: | 0_2_000000014001E7FC | |
| Source: | Code function: | 0_2_00000001400081A8 | |
| Source: | File created: | Jump to behavior | ||
| Source: | Mutant created: | ||
| Source: | Mutant created: | ||
| Source: | Mutant created: | ||
| Source: | Process created: | ||
| Source: | File read: | Jump to behavior | ||
| Source: | Key opened: | Jump to behavior | ||
| Source: | Virustotal: | ||
| Source: | ReversingLabs: | ||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Key value queried: | Jump to behavior | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static file information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Binary string: | ||
| Source: | Code function: | 0_2_0000000140032378 | |
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Code function: | 1_2_0044C2D1 | |
| Source: | Code function: | 1_2_0045AD4E | |
| Source: | Code function: | 1_2_0045B10E | |
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | Registry value created or modified: | Jump to behavior | ||
| Source: | Registry value created or modified: | Jump to behavior | ||
Hooking and other Techniques for Hiding and Protection: | |
|---|
| Uses known network protocols on non-standard ports | Show sources | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Code function: | 0_2_00000001400025A0 | |
| Source: | Code function: | 0_2_0000000140038030 | |
| Source: | Code function: | 0_2_00000001400900A0 | |
| Source: | Code function: | 0_2_00000001400926C4 | |
| Source: | Code function: | 0_2_00000001400668D4 | |
| Source: | Code function: | 0_2_0000000140090DC0 | |
| Source: | Code function: | 0_2_0000000140090DC0 | |
| Source: | Code function: | 0_2_0000000140090DC0 | |
| Source: | Code function: | 0_2_0000000140091184 | |
| Source: | Code function: | 0_2_0000000140045388 | |
| Source: | Code function: | 0_2_00000001400918D4 | |
| Source: | Code function: | 0_2_0000000140037F50 | |
| Source: | Code function: | 0_2_000000018000C380 | |
| Source: | Registry key monitored for changes: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
Malware Analysis System Evasion: | |
|---|
| Tries to detect sandboxes / dynamic malware analysis system (registry check) | Show sources | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Tries to detect sandboxes and other dynamic analysis tools (process name or module or function) | Show sources | ||
| Source: | Binary or memory string: | ||
| Source: | Registry key queried: | Jump to behavior | ||
| Source: | Registry key queried: | Jump to behavior | ||
| Source: | File opened / queried: | Jump to behavior | ||
| Source: | Evasive API call chain: | graph_0-68413 | ||
| Source: | API coverage: | ||
| Source: | API coverage: | ||
| Source: | Thread sleep count: | Jump to behavior | ||
| Source: | Thread sleep count: | Jump to behavior | ||
| Source: | Thread sleep count: | Jump to behavior | ||
| Source: | Last function: | ||
| Source: | Last function: | ||
| Source: | File Volume queried: | Jump to behavior | ||
| Source: | Code function: | 0_2_00000001400223C0 | |
| Source: | Code function: | 1_2_00405BD6 | |
| Source: | Code function: | 1_2_0040755D | |
| Source: | Code function: | 1_2_00406532 | |
| Source: | Code function: | 0_2_000000014015892C | |
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | API call chain: | graph_0-68580 | ||
| Source: | API call chain: | graph_0-67129 | ||
| Source: | Process information queried: | Jump to behavior | ||
| Source: | Code function: | 0_2_000000014015C7A0 | |
| Source: | Code function: | 0_2_0000000180014870 | |
| Source: | Code function: | 0_2_0000000140032378 | |
| Source: | Code function: | 0_2_0000000140002BFC | |
| Source: | Process token adjusted: | Jump to behavior | ||
| Source: | Code function: | 0_2_000000014015C7A0 | |
| Source: | Code function: | 0_2_0000000140154B40 | |
| Source: | Code function: | 0_2_00000001800090C0 | |
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Code function: | 0_2_000000014006CC48 | |
| Source: | Code function: | 0_2_0000000140003520 | |
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Code function: | 0_2_0000000140154D44 | |
| Source: | Code function: | 0_2_0000000140161ED4 | |
| Source: | Code function: | 0_2_00000001400206A8 | |
| Source: | Code function: | 0_2_0000000140001D04 | |
Mitre Att&ck Matrix |
|---|
| Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Exfiltration | Command and Control | Network Effects | Remote Service Effects | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Replication Through Removable Media1 | Scripting1 | Startup Items1 | Startup Items1 | Deobfuscate/Decode Files or Information1 | Input Capture31 | System Time Discovery2 | Replication Through Removable Media1 | Archive Collected Data1 | Exfiltration Over Other Network Medium | Ingress Tool Transfer2 | Eavesdrop on Insecure Network Communication | Remotely Track Device Without Authorization | Modify System Partition |
| Default Accounts | Native API2 | DLL Side-Loading1 | Exploitation for Privilege Escalation1 | Scripting1 | LSASS Memory | Peripheral Device Discovery11 | Remote Desktop Protocol | Input Capture31 | Exfiltration Over Bluetooth | Encrypted Channel12 | Exploit SS7 to Redirect Phone Calls/SMS | Remotely Wipe Data Without Authorization | Device Lockout |
| Domain Accounts | At (Linux) | Application Shimming1 | DLL Side-Loading1 | Obfuscated Files or Information2 | Security Account Manager | File and Directory Discovery4 | SMB/Windows Admin Shares | Clipboard Data1 | Automated Exfiltration | Non-Standard Port11 | Exploit SS7 to Track Device Location | Obtain Device Cloud Backups | Delete Device Data |
| Local Accounts | At (Windows) | Registry Run Keys / Startup Folder21 | Application Shimming1 | DLL Side-Loading1 | NTDS | System Information Discovery25 | Distributed Component Object Model | Input Capture | Scheduled Transfer | Non-Application Layer Protocol1 | SIM Card Swap | Carrier Billing Fraud | |
| Cloud Accounts | Cron | Network Logon Script | Bypass User Access Control1 | Bypass User Access Control1 | LSA Secrets | Query Registry1 | SSH | Keylogging | Data Transfer Size Limits | Application Layer Protocol2 | Manipulate Device Communication | Manipulate App Store Rankings or Ratings | |
| Replication Through Removable Media | Launchd | Rc.common | Access Token Manipulation1 | Masquerading1 | Cached Domain Credentials | Security Software Discovery241 | VNC | GUI Input Capture | Exfiltration Over C2 Channel | Multiband Communication | Jamming or Denial of Service | Abuse Accessibility Features | |
| External Remote Services | Scheduled Task | Startup Items | Process Injection11 | Virtualization/Sandbox Evasion2 | DCSync | Virtualization/Sandbox Evasion2 | Windows Remote Management | Web Portal Capture | Exfiltration Over Alternative Protocol | Commonly Used Port | Rogue Wi-Fi Access Points | Data Encrypted for Impact | |
| Drive-by Compromise | Command and Scripting Interpreter | Scheduled Task/Job | Registry Run Keys / Startup Folder21 | Access Token Manipulation1 | Proc Filesystem | Process Discovery1 | Shared Webroot | Credential API Hooking | Exfiltration Over Symmetric Encrypted Non-C2 Protocol | Application Layer Protocol | Downgrade to Insecure Protocols | Generate Fraudulent Advertising Revenue | |
| Exploit Public-Facing Application | PowerShell | At (Linux) | At (Linux) | Process Injection11 | /etc/passwd and /etc/shadow | Application Window Discovery1 | Software Deployment Tools | Data Staged | Exfiltration Over Asymmetric Encrypted Non-C2 Protocol | Web Protocols | Rogue Cellular Base Station | Data Destruction |
Behavior Graph |
|---|
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
InternetScreenshots |
|---|
Thumbnails
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
Antivirus, Machine Learning and Genetic Malware Detection |
|---|
Initial Sample |
|---|
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 15% | Virustotal | Browse | ||
| 22% | ReversingLabs | Win64.Trojan.CrypterX |
Dropped Files |
|---|
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 0% | Virustotal | Browse | ||
| 0% | Metadefender | Browse | ||
| 0% | ReversingLabs | |||
| 6% | Virustotal | Browse | ||
| 10% | ReversingLabs | Win64.Trojan.Wacatac | ||
| 0% | Virustotal | Browse | ||
| 0% | Metadefender | Browse | ||
| 0% | ReversingLabs | |||
| 0% | Virustotal | Browse | ||
| 0% | Metadefender | Browse | ||
| 0% | ReversingLabs |
Unpacked PE Files |
|---|
| No Antivirus matches |
|---|
Domains |
|---|
| No Antivirus matches |
|---|
URLs |
|---|
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 0% | Virustotal | Browse | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe |
Domains and IPs |
|---|
Contacted Domains |
|---|
| No contacted domains info |
|---|
Contacted URLs |
|---|
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| true | unknown |
URLs from Memory and Binaries |
|---|
| Name | Source | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false |
| unknown |
Contacted IPs |
|---|
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
Public |
|---|
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 40.126.31.135 | unknown | United States | 8075 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
| 204.79.197.200 | unknown | United States | 8068 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
| 110.92.66.246 | unknown | Hong Kong | 133115 | HKKFGL-AS-APHKKwaifongGroupLimitedHK | true |
Private |
|---|
| IP |
|---|
| 192.168.2.1 |
| 192.168.2.4 |
General Information |
|---|
| Joe Sandbox Version: | 31.0.0 Red Diamond |
| Analysis ID: | 343504 |
| Start date: | 24.01.2021 |
| Start time: | 10:22:33 |
| Joe Sandbox Product: | CloudBasic |
| Overall analysis duration: | 0h 9m 19s |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Sample file name: | #U5e74#U7ec8#U63d0#U6210#U5206#U7ea2#U6838#U5bf9#U8868@i4.bat (renamed file extension from bat to exe) |
| Cookbook file name: | default.jbs |
| Analysis system description: | Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211 |
| Number of analysed new started processes analysed: | 17 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | default |
| Analysis stop reason: | Timeout |
| Detection: | MAL |
| Classification: | mal72.troj.expl.evad.winEXE@13/17@0/5 |
| EGA Information: |
|
| HDC Information: |
|
| HCA Information: |
|
| Cookbook Comments: |
|
| Warnings: | Show All
|
Simulations |
|---|
Behavior and APIs |
|---|
| Time | Type | Description |
|---|---|---|
| 10:23:40 | Autostart | |
| 10:23:48 | Autostart |
Joe Sandbox View / Context |
|---|
IPs |
|---|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Link | Context |
|---|---|---|---|---|---|
| 204.79.197.200 | Get hash | malicious | Browse |
| |
| Get hash | malicious | Browse |
|
Domains |
|---|
| No context |
|---|
ASN |
|---|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Link | Context |
|---|---|---|---|---|---|
| HKKFGL-AS-APHKKwaifongGroupLimitedHK | Get hash | malicious | Browse |
| |
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| MICROSOFT-CORP-MSN-AS-BLOCKUS | Get hash | malicious | Browse |
| |
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| MICROSOFT-CORP-MSN-AS-BLOCKUS | Get hash | malicious | Browse |
| |
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
| ||
| Get hash | malicious | Browse |
|
JA3 Fingerprints |
|---|
| No context |
|---|
Dropped Files |
|---|
| No context |
|---|
Created / dropped Files |
|---|
| Process: | C:\Windows\System32\cmd.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 871 |
| Entropy (8bit): | 7.6751333998200835 |
| Encrypted: | false |
| SSDEEP: | 24:CIOegEZhc5iZzVT78nOwNDSxEqrohfoi4:CLegEZnf8nhmtURoT |
| MD5: | 23AEFC140636655BE400C41403524704 |
| SHA1: | BD581B29370FD93ABF63BD2C02998A0EF2DFD2A4 |
| SHA-256: | D37575E0B66A925ACB5432CC7B706DA8985635B80B3D60C6C90F748D1F743505 |
| SHA-512: | 2517137ABEE797FCA5E597A3826B7C02B1CB1EC045DAE4C1B493C8EE2070D6473DA9E7C584F8302D598DF11C687EE11BF2DDE9E33616243C6F94986CBD0A7AA0 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
|
| Process: | C:\ProgramData\Microsoft\zr.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1791 |
| Entropy (8bit): | 3.466273590595946 |
| Encrypted: | false |
| SSDEEP: | 24:8Z3AX3ighdUAfmqpdoe7KODlWJdo7aB6m:8Z3AnisOqjl2k0B6 |
| MD5: | 5FF572CBE6B366349A9D3389D4A60CAC |
| SHA1: | 497C442D14F4A09D00C3294784ECA1DC43A6F4A2 |
| SHA-256: | 16731A0D7B072BE60F580E93797D2E91F2DE970CF45C31EE7B9BAE52D4824B6E |
| SHA-512: | 6DF6B097BFF0B76EC465A886ABE72EBC7DB3C850E4FA7D8CE1D60A36F57E04E3063507D3F23F059AA7024E7E7162F8F298610AA1702E16217730B1EF79D176B8 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
|
| Process: | C:\Windows\System32\cmd.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 461088 |
| Entropy (8bit): | 6.581027593342649 |
| Encrypted: | false |
| SSDEEP: | 12288:tUBwDn0mdLrMkNpj6hTEXRrn9VsArg1xi:tUu7t3GTEhrn9VsA+i |
| MD5: | 045FCBE6C174AFA9A6A998BDD6F9FAD7 |
| SHA1: | 9F477006DC176608E953EF44902FCE17DDF8FCA3 |
| SHA-256: | 08E510EF41795B4192650452D8E5482DBF71CEFAF9D67CFE02F60253D6023F96 |
| SHA-512: | 59CE53DDA80567A3B3E19FA2FBE404B655CB4203170B1295B1E6C33B9EBD0B6D2526FB568255610E64FA5C29A6F5C464766CDD746E207FFD2D48DA36811D717B |
| Malicious: | false |
| Antivirus: | |
| Reputation: | low |
| Preview: |
|
| Process: | C:\Users\user\zT6Nm@i4\PMRunner64.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 191488 |
| Entropy (8bit): | 7.99619087524627 |
| Encrypted: | true |
| SSDEEP: | 3072:SGtyjkUNHHoDhFMFI0rciHPgZwkndg0WU15pI9SmDCPAuE1L3kaF/F1Dmq:S0yjkKHHAh9t4EbHI9SmDiAQWd1Dmq |
| MD5: | F6773A1C5D1566F4BEBDBF81BDDDC57D |
| SHA1: | 38CC9D3391DE6AE3773076E23B528F9534E40471 |
| SHA-256: | 5B672EE64618CCCBC94011E1BA713E5B6EFA574A8CCA18CC3653C499B2AF2202 |
| SHA-512: | 63E4BE550A66783ADFA6D064BA4912A6440986D3AF396F608F3C7B0B9F830DB8BB718216824689E1CA23D636AE67838ADB49DC0DA3263C9D64D823FB15CC964C |
| Malicious: | false |
| Reputation: | low |
| Preview: |
|
| Process: | C:\Users\user\zT6Nm@i4\zr.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 895 |
| Entropy (8bit): | 7.58674925006426 |
| Encrypted: | false |
| SSDEEP: | 24:7OegEZhc5iZzVT78nOwNDSxEqrohfoiQ3T:KegEZnf8nhmtURo/3T |
| MD5: | 8B8E701F0984126214856AEA7B49A3E1 |
| SHA1: | BC4995ABD24C3451D3AF427F7CE03FA484055157 |
| SHA-256: | D4714CBC4612E14FA5D62B26274411A435396094EFECAAC6D82325FA2400FD04 |
| SHA-512: | 7049B6C1ED94B5F10138C3971598A7C98D2E25F340A3C914F4E0D27074AF70A51FF53A7652CE4373140054B0E16A484D1083483CFEB105F6DF5D313C3FAF35E5 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
|
| Process: | C:\Users\user\Desktop\#U5e74#U7ec8#U63d0#U6210#U5206#U7ea2#U6838#U5bf9#U8868@i4.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 224323 |
| Entropy (8bit): | 7.996498851977439 |
| Encrypted: | true |
| SSDEEP: | 6144:5SDdKtn3KwKa9xg8LIzF9yWeSBvd+tResBuYU:4Dde3xKhOIzOGBF |
| MD5: | 7B30F5D321E85813F5E5835F92FFA0FC |
| SHA1: | 369474EA5BFFA01DAC8C663EDE08D7D0D8967054 |
| SHA-256: | 445E5B49DA01A0D99AFD84EF3D9C5238E02D5E4FBC546D43C619005A622C9917 |
| SHA-512: | 8797E96456F2C822DA7B79486784BA49ED7A4CC85FF74F76D097339EA8C2FDC945E1EB51BEF28F7E1358EA38BD6BBB8D1C35D63A54F5000A1D75C5E90DDAB0FD |
| Malicious: | false |
| Reputation: | low |
| Preview: |
|
| Process: | C:\Users\user\Desktop\#U5e74#U7ec8#U63d0#U6210#U5206#U7ea2#U6838#U5bf9#U8868@i4.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 302592 |
| Entropy (8bit): | 5.94262128533878 |
| Encrypted: | false |
| SSDEEP: | 6144:YDVMbwz0W4gWqPcjwhum9o34Ec2x1tRuf+X4zNEP:YDGO0WTWq4wYb34Ec2vupEP |
| MD5: | B8477E4DF0F24A96BBAFD2F13C31A4A2 |
| SHA1: | E4548C10552B1906BBE4A7EED90E97D24C958CF5 |
| SHA-256: | 5EFD269CA1CD474F68ECE50E6AC3F88F1831ACA273DE9789C17DD8A46AEA8D71 |
| SHA-512: | 6FE6FF9E3BD95CE0583AA2BBB06B8AB123363D94AFEEAB3CCE377B1FB5EABB0BA58F1107E822C39FF2D186E788783262EFFAB8270519A2A118C055013BEEC6B3 |
| Malicious: | true |
| Antivirus: |
|
| Reputation: | low |
| Preview: |
|
| Process: | C:\Users\user\Desktop\#U5e74#U7ec8#U63d0#U6210#U5206#U7ea2#U6838#U5bf9#U8868@i4.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 271704 |
| Entropy (8bit): | 5.761811520401724 |
| Encrypted: | false |
| SSDEEP: | 3072:wWHyRIh1NDBeEOqDhPbsuB35WlP+7l1MYMb3URvwgwWwBHNFs:nrrNDBeJwhbh3mU9wgw |
| MD5: | 65DBB57517611D9DE8CE522022DCD727 |
| SHA1: | B33E6DB5C460E5E38DD636C4D48E9D4523E2838F |
| SHA-256: | 0525B815E61D3CD83FD4C87032DE7C1DCBA5E8D2619539F925E43624EB6E1D77 |
| SHA-512: | D8D34BC3642255DFF395CB47A0EA58CC07D911B3535A0A6D972CC4E501F6CCAB200A7D636FCDEE77DC6E7AD6B735918BCDF48EA6F0EA0E26804C31F2D175490D |
| Malicious: | true |
| Antivirus: | |
| Reputation: | low |
| Preview: |
|
| Process: | C:\Users\user\Desktop\#U5e74#U7ec8#U63d0#U6210#U5206#U7ea2#U6838#U5bf9#U8868@i4.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1791 |
| Entropy (8bit): | 3.466273590595946 |
| Encrypted: | false |
| SSDEEP: | 24:8Z3AX3ighdUAfmqpdoe7KODlWJdo7aB6m:8Z3AnisOqjl2k0B6 |
| MD5: | 5FF572CBE6B366349A9D3389D4A60CAC |
| SHA1: | 497C442D14F4A09D00C3294784ECA1DC43A6F4A2 |
| SHA-256: | 16731A0D7B072BE60F580E93797D2E91F2DE970CF45C31EE7B9BAE52D4824B6E |
| SHA-512: | 6DF6B097BFF0B76EC465A886ABE72EBC7DB3C850E4FA7D8CE1D60A36F57E04E3063507D3F23F059AA7024E7E7162F8F298610AA1702E16217730B1EF79D176B8 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
|
| Process: | C:\Users\user\Desktop\#U5e74#U7ec8#U63d0#U6210#U5206#U7ea2#U6838#U5bf9#U8868@i4.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 148 |
| Entropy (8bit): | 4.859584238440697 |
| Encrypted: | false |
| SSDEEP: | 3:55Pt+ZIgUAdkdZkRErG+ffbNQdi25Pt+ZIrUhFmRdZkRErG+fUNhn:PwZIPAra3ZQdi2wZIroakn |
| MD5: | 7EE919ABFE2EBEFCDD420D0E0784F1C9 |
| SHA1: | 760A5A935E7453C7C3D0CFE786975F97931382BB |
| SHA-256: | 21C285FD608237D8B329AD8266FDCC0E9C671BAEB956E9544CAEC712944EF8A9 |
| SHA-512: | 0327C9A5500BEF65DFF1501553F0471B7CF2584CAA56CBF15673AC4AF10E748C08E15C5878F0C792907F2F777C6393925A22AB36BDBB70C29963FEC9A07AFFF5 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
|
| Process: | C:\Users\user\Desktop\#U5e74#U7ec8#U63d0#U6210#U5206#U7ea2#U6838#U5bf9#U8868@i4.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 65 |
| Entropy (8bit): | 4.934228490671524 |
| Encrypted: | false |
| SSDEEP: | 3:HRAbABGQVuOt+ZIo7g:HRYF5OwZIig |
| MD5: | 004A6C48B0C8EE5A854123B30016589A |
| SHA1: | E491D660E83A6DC76EDFB00A8750B98E6F66C665 |
| SHA-256: | 2CF3CC8BCD1655AE232418CCFEBBF8D0AA5EFB062F95DF320C27B5C3A69E9A7C |
| SHA-512: | 02CD3B044426D6CE89CECBFD16D294882AF867C33F53E6AE71104A4D4E2D57C9A551E659616B7D331CD8714E55DED39538796AD4A1F076483E619CF49E864E7E |
| Malicious: | false |
| Yara Hits: |
|
| Reputation: | low |
| Preview: |
|
| Process: | C:\Users\user\Desktop\#U5e74#U7ec8#U63d0#U6210#U5206#U7ea2#U6838#U5bf9#U8868@i4.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1845 |
| Entropy (8bit): | 3.204025472281673 |
| Encrypted: | false |
| SSDEEP: | 24:8PHjJW6PV7Mmc7S6MAdx+/5+fUt+/g4I0Z57aB6m:8PMYdCXLiu8sIrB6 |
| MD5: | BE3AF8B163611E11E35121A9C0DE546F |
| SHA1: | DFEEE23EAE5794D9C6D7B54A00CB0E42800AFAA3 |
| SHA-256: | 271541E40261A329ED49F004A2ABAAA533009C1E94B9F7CA3CED62756E59912B |
| SHA-512: | 495C1D2427C943DFBC3739CFC3E104934449E629B39FEF81074F21151345DBA06A96DFE766B03F8CF74CDE5EB8D52CB8F00FA969186E8CECDFCF3B37346739EF |
| Malicious: | false |
| Reputation: | low |
| Preview: |
|
| Process: | C:\Users\user\Desktop\#U5e74#U7ec8#U63d0#U6210#U5206#U7ea2#U6838#U5bf9#U8868@i4.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1457 |
| Entropy (8bit): | 1.9452446037061828 |
| Encrypted: | false |
| SSDEEP: | 12:8zM0i/kdvrHjHbQbfnbB5baP0yZ3ZrwPH:8AIzD7kzzk0yZ3Zk |
| MD5: | 95A5332A3DE1AE6E16F7E139EE968E9B |
| SHA1: | 9E7DD05E15FCAC8C1B8E91978B7EFEB923CD6A88 |
| SHA-256: | 5D0904F70763CA9D1118EFD2171BA4A0CF0D7C10B8D121836F95CE16A3E03C5A |
| SHA-512: | 53A9CA5C5754D742BD568953B8B4A5AB58BDEA9C9CFC7E49C921484883BCF93CA9E5B6758FDFF72FF98BD0C5D1B70B97B264C89912880A7BB179CE26E8A768B0 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
|
| Process: | C:\Users\user\Desktop\#U5e74#U7ec8#U63d0#U6210#U5206#U7ea2#U6838#U5bf9#U8868@i4.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1837 |
| Entropy (8bit): | 3.401424786774406 |
| Encrypted: | false |
| SSDEEP: | 24:8hJ3AX3igX1AnxQfouopHO8jAIM7aB6m:8/3AniRyfouopHdB6 |
| MD5: | 4AC952055902E20C748E96234BF2F56C |
| SHA1: | 9B0BADF7DE8286543D6D5C45CD19E834E76E671F |
| SHA-256: | 0D7B6A444BFA014BEE1DC4769FB66663BB1F0FC0B3327EC41AB9F5342BF571EF |
| SHA-512: | 80639E1E8B2C4DD3BEC66CBEF87B7E1293D9CCE7E8B34C71B9011400E536CBA39801155CAC3C691B096F2B2B55254CF53FB402B7D843E429196C8B5484DD83DA |
| Malicious: | false |
| Preview: |
|
| Process: | C:\Users\user\Desktop\#U5e74#U7ec8#U63d0#U6210#U5206#U7ea2#U6838#U5bf9#U8868@i4.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 461088 |
| Entropy (8bit): | 6.581027593342649 |
| Encrypted: | false |
| SSDEEP: | 12288:tUBwDn0mdLrMkNpj6hTEXRrn9VsArg1xi:tUu7t3GTEhrn9VsA+i |
| MD5: | 045FCBE6C174AFA9A6A998BDD6F9FAD7 |
| SHA1: | 9F477006DC176608E953EF44902FCE17DDF8FCA3 |
| SHA-256: | 08E510EF41795B4192650452D8E5482DBF71CEFAF9D67CFE02F60253D6023F96 |
| SHA-512: | 59CE53DDA80567A3B3E19FA2FBE404B655CB4203170B1295B1E6C33B9EBD0B6D2526FB568255610E64FA5C29A6F5C464766CDD746E207FFD2D48DA36811D717B |
| Malicious: | false |
| Antivirus: | |
| Preview: |
|
| Process: | C:\ProgramData\Microsoft\zr.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 484 |
| Entropy (8bit): | 4.98831110003937 |
| Encrypted: | false |
| SSDEEP: | 12:pltQzsBRwgaQH7pyTkaHo8ajFsQcE5+svhJAISLGN2Gy:pYzsDwXQboTjUZH+svhJAI9wv |
| MD5: | 70C66FCD7F376B7EC9AD79053CA63030 |
| SHA1: | E3AE64762463879E0B8C91713A291B540131E423 |
| SHA-256: | 3FD565B1794F89DB8FFA179D9EBF283A0AC7B37BD9E8AD8DE94BB1443B0416BA |
| SHA-512: | 0B07E9206A5B8D60D93AE7AE826605FFBC2DE13B072DB3EEF2A74E0E05485B8ADDA1E5D6231CC9965FD34093739603566841098631FBD89B8F7CC8889A2FBDA0 |
| Malicious: | false |
| Preview: |
|
Static File Info |
|---|
General | |
|---|---|
| File type: | |
| Entropy (8bit): | 6.805779435598225 |
| TrID: |
|
| File name: | #U5e74#U7ec8#U63d0#U6210#U5206#U7ea2#U6838#U5bf9#U8868@i4.exe |
| File size: | 3150336 |
| MD5: | 6665909a2652c5860fd874cb15c3991c |
| SHA1: | 84a5a2e920e8165634e510766eaa51662401a227 |
| SHA256: | 1ef7ae3509e71c3cd0904a7396831e6bd2c021f14dc5d4b2485a38ebefc3dd3d |
| SHA512: | c7ca90037a3e67b443fe6b8f8a8df510eb2794d53a80a416b7234de123703cf5b590f3314f1e0acf749156ce40cc176182d521679c83afceb18b60d39e07c6a5 |
| SSDEEP: | 49152:jwBFRHHY3rC5IgDAI9q8xCFEXlZ40nqSvLcUhGcwKEAX/ivWPlGbjtGysnISnvpZ:jwlHYm5IML9hGvTWlGnUysnISnBdu2 |
| File Content Preview: | MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........c`7...d...d...dFL.d...d.z.d...d.z.d...d.z.d...d...d...d.t.dd..d.t.d...d.t.d...d.t.d...d.t.d...dRich...d................PE..d.. |
File Icon |
|---|
 | |
| Icon Hash: | 74cac4d4d4d0c4d4 |
Static PE Info |
|---|
General | |
|---|---|
| Entrypoint: | 0x1401543b0 |
| Entrypoint Section: | .text |
| Digitally signed: | false |
| Imagebase: | 0x140000000 |
| Subsystem: | windows gui |
| Image File Characteristics: | EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE, RELOCS_STRIPPED |
| DLL Characteristics: | TERMINAL_SERVER_AWARE, NX_COMPAT |
| Time Stamp: | 0x600BDCC7 [Sat Jan 23 08:22:31 2021 UTC] |
| TLS Callbacks: | |
| CLR (.Net) Version: | |
| OS Version Major: | 5 |
| OS Version Minor: | 2 |
| File Version Major: | 5 |
| File Version Minor: | 2 |
| Subsystem Version Major: | 5 |
| Subsystem Version Minor: | 2 |
| Import Hash: | 5894f7ecf05bebd0f6f297d29b91f916 |
Entrypoint Preview |
|---|
| Instruction |
|---|
| dec eax |
| sub esp, 28h |
| call 00007F7DAC8515DCh |
| dec eax |
| add esp, 28h |
| jmp 00007F7DAC84AA97h |
| int3 |
| int3 |
| dec eax |
| mov dword ptr [esp+08h], ebx |
| push edi |
| dec eax |
| sub esp, 20h |
| dec eax |
| lea eax, dword ptr [00076193h] |
| mov ebx, edx |
| dec eax |
| mov edi, ecx |
| dec eax |
| mov dword ptr [ecx], eax |
| call 00007F7DAC851667h |
| test bl, 00000001h |
| je 00007F7DAC84AC4Ah |
| dec eax |
| mov ecx, edi |
| call 00007F7DAC6F960Eh |
| dec eax |
| mov eax, edi |
| dec eax |
| mov ebx, dword ptr [esp+30h] |
| dec eax |
| add esp, 20h |
| pop edi |
| ret |
| int3 |
| int3 |
| int3 |
| dec eax |
| sub esp, 28h |
| dec eax |
| mov eax, edx |
| dec eax |
| lea edx, dword ptr [ecx+11h] |
| dec eax |
| lea ecx, dword ptr [eax+11h] |
| call 00007F7DAC8516B1h |
| test eax, eax |
| sete al |
| dec eax |
| add esp, 28h |
| ret |
| int3 |
| int3 |
| dec eax |
| mov dword ptr [esp+10h], ebx |
| dec eax |
| mov dword ptr [esp+18h], ebp |
| dec eax |
| mov dword ptr [esp+20h], esi |
| push edi |
| inc ecx |
| push esp |
| inc ecx |
| push ebp |
| inc ecx |
| push esi |
| inc ecx |
| push edi |
| dec eax |
| sub esp, 20h |
| dec ecx |
| arpl word ptr [eax+0Ch], di |
| dec esp |
| mov edi, ecx |
| dec ecx |
| mov ecx, eax |
| dec ecx |
| mov ebp, ecx |
| dec ebp |
| mov ebp, eax |
| dec esp |
| mov esi, edx |
| call 00007F7DAC8517ADh |
| dec ebp |
| mov edx, dword ptr [edi] |
| dec esp |
| mov dword ptr [ebp+00h], edx |
| inc esp |
| mov esp, eax |
| test edi, edi |
| je 00007F7DAC84ACCAh |
| dec eax |
| lea ecx, dword ptr [edi+edi*4] |
| dec eax |
| lea esi, dword ptr [FFFFFFECh+ecx*4] |
| dec ecx |
| arpl word ptr [ebp+10h], bx |
| dec ecx |
Rich Headers |
|---|
| Programming Language: |
|
Data Directories |
|---|
| Name | Virtual Address | Virtual Size | Is in Section |
|---|---|---|---|
| IMAGE_DIRECTORY_ENTRY_EXPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_IMPORT | 0x1ff938 | 0x17c | .rdata |
| IMAGE_DIRECTORY_ENTRY_RESOURCE | 0x306000 | 0xb0f8 | .rsrc |
| IMAGE_DIRECTORY_ENTRY_EXCEPTION | 0x2f0000 | 0x13518 | .pdata |
| IMAGE_DIRECTORY_ENTRY_SECURITY | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_BASERELOC | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_DEBUG | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_COPYRIGHT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_GLOBALPTR | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_TLS | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_IAT | 0x17b000 | 0x1350 | .rdata |
| IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_RESERVED | 0x0 | 0x0 |
Sections |
|---|
| Name | Virtual Address | Virtual Size | Raw Size | Xored PE | ZLIB Complexity | File Type | Entropy | Characteristics |
|---|---|---|---|---|---|---|---|---|
| .text | 0x1000 | 0x179a48 | 0x179c00 | False | 0.519473729112 | data | 6.37063911403 | IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ |
| .rdata | 0x17b000 | 0x886cc | 0x88800 | False | 0.253088870765 | data | 4.38109791814 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ |
| .data | 0x204000 | 0xeb290 | 0xdee00 | False | 0.944429595485 | data | 7.74292213666 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_MEM_READ |
| .pdata | 0x2f0000 | 0x13518 | 0x13600 | False | 0.497505040323 | data | 6.14754754116 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ |
| text | 0x304000 | 0xbbd | 0xc00 | False | 0.466796875 | data | 5.50929008744 | IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_INITIALIZED_DATA |
| data | 0x305000 | 0x760 | 0x800 | False | 0.6806640625 | data | 5.89712002279 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ |
| .rsrc | 0x306000 | 0xb0f8 | 0xb200 | False | 0.413031074438 | data | 5.68750375192 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ |
Resources |
|---|
| Name | RVA | Size | Type | Language | Country |
|---|---|---|---|---|---|
| RT_CURSOR | 0x306c10 | 0x134 | data | Chinese | China |
| RT_CURSOR | 0x306d44 | 0xb4 | data | Chinese | China |
| RT_CURSOR | 0x306df8 | 0x134 | AmigaOS bitmap font | Chinese | China |
| RT_CURSOR | 0x306f2c | 0x134 | data | Chinese | China |
| RT_CURSOR | 0x307060 | 0x134 | data | Chinese | China |
| RT_CURSOR | 0x307194 | 0x134 | data | Chinese | China |
| RT_CURSOR | 0x3072c8 | 0x134 | data | Chinese | China |
| RT_CURSOR | 0x3073fc | 0x134 | data | Chinese | China |
| RT_CURSOR | 0x307530 | 0x134 | data | Chinese | China |
| RT_CURSOR | 0x307664 | 0x134 | data | Chinese | China |
| RT_CURSOR | 0x307798 | 0x134 | data | Chinese | China |
| RT_CURSOR | 0x3078cc | 0x134 | data | Chinese | China |
| RT_CURSOR | 0x307a00 | 0x134 | AmigaOS bitmap font | Chinese | China |
| RT_CURSOR | 0x307b34 | 0x134 | data | Chinese | China |
| RT_CURSOR | 0x307c68 | 0x134 | data | Chinese | China |
| RT_CURSOR | 0x307d9c | 0x134 | data | Chinese | China |
| RT_BITMAP | 0x307ed0 | 0xb8 | data | Chinese | China |
| RT_BITMAP | 0x307f88 | 0x144 | data | Chinese | China |
| RT_ICON | 0x3080cc | 0xea8 | data | Chinese | China |
| RT_ICON | 0x308f74 | 0x8a8 | dBase IV DBT of @.DBF, block length 1024, next free block index 40, next free block 0, next used block 0 | Chinese | China |
| RT_ICON | 0x30981c | 0x568 | GLS_BINARY_LSB_FIRST | Chinese | China |
| RT_ICON | 0x309d84 | 0x25ad | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | Chinese | China |
| RT_ICON | 0x30c334 | 0x25a8 | data | Chinese | China |
| RT_ICON | 0x30e8dc | 0x10a8 | data | Chinese | China |
| RT_ICON | 0x30f984 | 0x468 | GLS_BINARY_LSB_FIRST | Chinese | China |
| RT_DIALOG | 0x30fdec | 0xde | data | Chinese | China |
| RT_DIALOG | 0x30fecc | 0x210 | data | Chinese | China |
| RT_DIALOG | 0x3100dc | 0xe2 | data | Chinese | China |
| RT_DIALOG | 0x3101c0 | 0x34 | data | Chinese | China |
| RT_STRING | 0x3101f4 | 0x6a | data | Chinese | China |
| RT_STRING | 0x310260 | 0x4e | data | Chinese | China |
| RT_STRING | 0x3102b0 | 0x2c | data | Chinese | China |
| RT_STRING | 0x3102dc | 0x84 | data | Chinese | China |
| RT_STRING | 0x310360 | 0x1c4 | data | Chinese | China |
| RT_STRING | 0x310524 | 0x14e | data | Chinese | China |
| RT_STRING | 0x310674 | 0x10e | data | Chinese | China |
| RT_STRING | 0x310784 | 0x50 | data | Chinese | China |
| RT_STRING | 0x3107d4 | 0x44 | data | Chinese | China |
| RT_STRING | 0x310818 | 0x68 | data | Chinese | China |
| RT_STRING | 0x310880 | 0x1b2 | data | Chinese | China |
| RT_STRING | 0x310a34 | 0xf4 | data | Chinese | China |
| RT_STRING | 0x310b28 | 0x24 | data | Chinese | China |
| RT_STRING | 0x310b4c | 0x1a6 | data | Chinese | China |
| RT_GROUP_CURSOR | 0x310cf4 | 0x22 | Lotus unknown worksheet or configuration, revision 0x2 | Chinese | China |
| RT_GROUP_CURSOR | 0x310d18 | 0x14 | Lotus unknown worksheet or configuration, revision 0x1 | Chinese | China |
| RT_GROUP_CURSOR | 0x310d2c | 0x14 | Lotus unknown worksheet or configuration, revision 0x1 | Chinese | China |
| RT_GROUP_CURSOR | 0x310d40 | 0x14 | Lotus unknown worksheet or configuration, revision 0x1 | Chinese | China |
| RT_GROUP_CURSOR | 0x310d54 | 0x14 | Lotus unknown worksheet or configuration, revision 0x1 | Chinese | China |
| RT_GROUP_CURSOR | 0x310d68 | 0x14 | Lotus unknown worksheet or configuration, revision 0x1 | Chinese | China |
| RT_GROUP_CURSOR | 0x310d7c | 0x14 | Lotus unknown worksheet or configuration, revision 0x1 | Chinese | China |
| RT_GROUP_CURSOR | 0x310d90 | 0x14 | Lotus unknown worksheet or configuration, revision 0x1 | Chinese | China |
| RT_GROUP_CURSOR | 0x310da4 | 0x14 | Lotus unknown worksheet or configuration, revision 0x1 | Chinese | China |
| RT_GROUP_CURSOR | 0x310db8 | 0x14 | Lotus unknown worksheet or configuration, revision 0x1 | Chinese | China |
| RT_GROUP_CURSOR | 0x310dcc | 0x14 | Lotus unknown worksheet or configuration, revision 0x1 | Chinese | China |
| RT_GROUP_CURSOR | 0x310de0 | 0x14 | Lotus unknown worksheet or configuration, revision 0x1 | Chinese | China |
| RT_GROUP_CURSOR | 0x310df4 | 0x14 | Lotus unknown worksheet or configuration, revision 0x1 | Chinese | China |
| RT_GROUP_CURSOR | 0x310e08 | 0x14 | Lotus unknown worksheet or configuration, revision 0x1 | Chinese | China |
| RT_GROUP_CURSOR | 0x310e1c | 0x14 | Lotus unknown worksheet or configuration, revision 0x1 | Chinese | China |
| RT_GROUP_ICON | 0x310e30 | 0x68 | data | Chinese | China |
| RT_MANIFEST | 0x310e98 | 0x25f | ASCII text, with very long lines, with no line terminators | English | United States |
Imports |
|---|
| DLL | Import |
|---|---|
| KERNEL32.dll | IsValidCodePage, GetTimeZoneInformation, LCMapStringW, GetConsoleCP, GetConsoleMode, WriteConsoleW, SetEnvironmentVariableA, RtlCaptureContext, RtlVirtualUnwind, IsDebuggerPresent, UnhandledExceptionFilter, TerminateProcess, QueryPerformanceCounter, HeapCreate, GetVersion, HeapSetInformation, FlsAlloc, FlsFree, FlsSetValue, FlsGetValue, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetStdHandle, SizeofResource, SetUnhandledExceptionFilter, GetFileType, SetStdHandle, VirtualQuery, GetSystemInfo, SetThreadStackGuarantee, HeapSize, HeapQueryInformation, RtlPcToFileHeader, GetOEMCP, CreateThread, ExitThread, HeapReAlloc, GetSystemTimeAsFileTime, DecodePointer, EncodePointer, RtlUnwindEx, RtlLookupFunctionEntry, GetStartupInfoW, GetCommandLineW, FindResourceExW, SearchPathW, Sleep, GetProfileIntW, InitializeCriticalSectionAndSpinCount, GetTickCount, GetNumberFormatW, GetWindowsDirectoryW, GetTempPathW, GetTempFileNameW, GetFileTime, GetFileSizeEx, GetFileAttributesW, FileTimeToLocalFileTime, GetFileAttributesExW, SetErrorMode, FileTimeToSystemTime, GlobalGetAtomNameW, lstrlenA, GetFullPathNameW, GetACP, GetCPInfo, RaiseException, GetStringTypeW, GetVolumeInformationW, FindFirstFileW, FindClose, GetCurrentProcess, DuplicateHandle, GetFileSize, SetEndOfFile, UnlockFile, LockFile, FlushFileBuffers, SetFilePointer, WriteFile, ReadFile, CreateFileW, lstrcmpiW, GetThreadLocale, lstrcpyW, DeleteFileW, TlsFree, DeleteCriticalSection, LocalReAlloc, TlsSetValue, GlobalHandle, GlobalReAlloc, TlsAlloc, InitializeCriticalSection, EnterCriticalSection, TlsGetValue, LeaveCriticalSection, LocalAlloc, GlobalFlags, GetCurrentDirectoryW, ReleaseActCtx, CreateActCtxW, CopyFileW, GlobalSize, FormatMessageW, LocalFree, MulDiv, GlobalFindAtomW, GetVersionExW, CompareStringW, GlobalUnlock, GlobalFree, FreeResource, GetCurrentProcessId, GlobalAddAtomW, GetPrivateProfileStringW, lstrlenW, WritePrivateProfileStringW, GetPrivateProfileIntW, CreateEventW, SuspendThread, SetEvent, WaitForSingleObject, ResumeThread, SetThreadPriority, CloseHandle, lstrcmpA, GlobalDeleteAtom, GetCurrentThread, GetCurrentThreadId, GetUserDefaultUILanguage, ConvertDefaultLocale, GetSystemDefaultUILanguage, GetModuleFileNameW, GetLocaleInfoW, ActivateActCtx, LoadLibraryW, GetLastError, DeactivateActCtx, SetLastError, WideCharToMultiByte, GlobalLock, lstrcmpW, GlobalAlloc, GetModuleHandleW, HeapAlloc, FreeLibrary, GetProcessHeap, HeapFree, IsBadReadPtr, LoadLibraryA, GetProcAddress, VirtualFree, VirtualProtect, VirtualAlloc, MultiByteToWideChar, TerminateThread, ExitProcess, FindResourceW, LoadResource, LockResource |
| USER32.dll | SetMenuDefaultItem, PostThreadMessageW, CreateMenu, IsMenu, UpdateLayeredWindow, UnionRect, MonitorFromPoint, TranslateMDISysAccel, DrawMenuBar, DefMDIChildProcW, DefFrameProcW, RegisterClipboardFormatW, CopyImage, GetIconInfo, EnableScrollBar, HideCaret, InvertRect, GetMenuDefaultItem, UnpackDDElParam, ReuseDDElParam, LoadImageW, InsertMenuItemW, TranslateAcceleratorW, LockWindowUpdate, BringWindowToTop, SetCursorPos, CreateAcceleratorTableW, LoadAcceleratorsW, GetKeyboardState, GetKeyboardLayout, ToUnicodeEx, DrawFocusRect, DrawFrameControl, DrawEdge, DrawIconEx, DrawStateW, SetClassLongPtrW, GetAsyncKeyState, NotifyWinEvent, CreatePopupMenu, DestroyAcceleratorTable, SetParent, RedrawWindow, SetWindowRgn, IsZoomed, UnregisterClassW, MessageBeep, GetNextDlgGroupItem, InvalidateRgn, SetRect, IsRectEmpty, CopyAcceleratorTableW, OffsetRect, CharNextW, IntersectRect, LoadMenuW, CharUpperW, DestroyIcon, WaitMessage, ReleaseCapture, WindowFromPoint, SetCapture, GetSysColorBrush, LoadCursorW, SetLayeredWindowAttributes, SetRectEmpty, KillTimer, SetTimer, InvalidateRect, RealChildWindowFromPoint, DeleteMenu, EndPaint, BeginPaint, GetWindowDC, ClientToScreen, GrayStringW, DrawTextExW, DrawTextW, TabbedTextOutW, FillRect, SystemParametersInfoW, DestroyMenu, IsClipboardFormatAvailable, InflateRect, GetMenuStringW, InsertMenuW, RemoveMenu, ShowWindow, SetWindowTextW, IsDialogMessageW, SetDlgItemTextW, CheckDlgButton, RegisterWindowMessageW, SendDlgItemMessageW, SendDlgItemMessageA, WinHelpW, IsChild, GetCapture, GetClassNameW, GetClassLongPtrW, SetPropW, GetPropW, RemovePropW, SetFocus, GetWindowTextLengthW, GetWindowTextW, GetForegroundWindow, BeginDeferWindowPos, EndDeferWindowPos, GetTopWindow, GetWindowLongPtrW, SetWindowLongPtrW, UnhookWindowsHookEx, GetMessageTime, GetMessagePos, MonitorFromWindow, GetMonitorInfoW, MapWindowPoints, ScrollWindow, TrackPopupMenu, SetMenu, SetScrollRange, GetScrollRange, SetScrollPos, GetScrollPos, SetForegroundWindow, ShowScrollBar, UpdateWindow, GetSubMenu, GetMenuItemID, GetMenuItemCount, CreateWindowExW, GetClassInfoExW, GetClassInfoW, RegisterClassW, GetSysColor, AdjustWindowRectEx, GetWindowRect, ScreenToClient, EqualRect, DeferWindowPos, GetScrollInfo, SetScrollInfo, PtInRect, SetWindowPlacement, GetWindowPlacement, GetDlgCtrlID, DefWindowProcW, CallWindowProcW, GetMenu, GetWindow, SetWindowContextHelpId, FrameRect, GetUpdateRect, GetWindowRgn, DestroyCursor, SubtractRect, MapVirtualKeyExW, IsCharLowerW, GetDoubleClickTime, MapDialogRect, SetWindowPos, MapVirtualKeyW, GetKeyNameTextW, ReleaseDC, GetDC, CopyRect, GetDesktopWindow, SetActiveWindow, CreateDialogIndirectParamW, CharUpperBuffW, CopyIcon, EmptyClipboard, CloseClipboard, SetClipboardData, GetMenuItemInfoW, OpenClipboard, DestroyWindow, IsWindow, GetDlgItem, GetNextDlgTabItem, EndDialog, GetWindowThreadProcessId, GetLastActivePopup, IsWindowEnabled, MessageBoxW, ShowOwnedPopups, SetCursor, SetWindowsHookExW, CallNextHookEx, GetMessageW, TranslateMessage, DispatchMessageW, GetActiveWindow, IsWindowVisible, GetKeyState, PeekMessageW, GetCursorPos, ValidateRect, SetMenuItemBitmaps, GetMenuCheckMarkDimensions, LoadBitmapW, GetFocus, GetParent, ModifyMenuW, GetMenuState, EnableMenuItem, CheckMenuItem, PostMessageW, PostQuitMessage, GetSystemMetrics, LoadIconW, EnableWindow, GetClientRect, IsIconic, GetSystemMenu, SendMessageW, AppendMenuW, DrawIcon, MoveWindow, GetWindowLongW, SetWindowLongW, EnumDisplayMonitors |
| GDI32.dll | CreateSolidBrush, CreateHatchBrush, CreateDIBitmap, CreateCompatibleBitmap, GetTextMetricsW, EnumFontFamiliesW, GetTextCharsetInfo, SetRectRgn, CombineRgn, GetMapMode, DPtoLP, GetBkColor, GetTextColor, GetRgnBox, CreateDIBSection, CreateRoundRectRgn, CreatePolygonRgn, CreateEllipticRgn, Polyline, Ellipse, Polygon, CreatePalette, GetPaletteEntries, GetNearestPaletteIndex, RealizePalette, GetSystemPaletteEntries, OffsetRgn, SetDIBColorTable, CreatePen, SetPixel, Rectangle, EnumFontFamiliesExW, LPtoDP, GetWindowOrgEx, GetViewportOrgEx, PtInRegion, FillRgn, FrameRgn, GetBoundsRect, ExtFloodFill, SetPaletteEntries, GetTextFaceW, SetPixelV, RectVisible, PtVisible, GetPixel, GetObjectType, TextOutW, SelectPalette, GetStockObject, CreatePatternBrush, DeleteDC, ExtSelectClipRgn, ScaleWindowExtEx, SetWindowExtEx, OffsetWindowOrgEx, SetWindowOrgEx, ScaleViewportExtEx, SetViewportExtEx, OffsetViewportOrgEx, SetViewportOrgEx, SelectObject, StretchBlt, CreateBitmap, GetWindowExtEx, GetViewportExtEx, CreateRectRgn, SelectClipRgn, DeleteObject, SetLayout, GetLayout, SetTextAlign, MoveToEx, LineTo, IntersectClipRect, ExcludeClipRect, GetClipBox, SetMapMode, SetROP2, SetPolyFillMode, SetBkMode, RestoreDC, SaveDC, GetTextExtentPoint32W, ExtTextOutW, BitBlt, CreateCompatibleDC, CreateFontIndirectW, CreateDCW, CopyMetaFileW, GetDeviceCaps, GetObjectW, SetBkColor, SetTextColor, PatBlt, CreateRectRgnIndirect, Escape |
| MSIMG32.dll | AlphaBlend, TransparentBlt |
| COMDLG32.dll | GetFileTitleW |
| WINSPOOL.DRV | ClosePrinter, OpenPrinterW, DocumentPropertiesW |
| ADVAPI32.dll | RegEnumKeyExW, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegSetValueExW, RegDeleteValueW, RegDeleteKeyW, RegEnumKeyW, RegQueryValueW, RegCloseKey, RegEnumValueW |
| SHELL32.dll | SHAppBarMessage, SHGetFileInfoW, ShellExecuteW, DragFinish, DragQueryFileW, SHBrowseForFolderW, SHGetSpecialFolderLocation, SHGetPathFromIDListW, SHGetDesktopFolder |
| COMCTL32.dll | ImageList_GetIconSize |
| SHLWAPI.dll | PathFindFileNameW, PathStripToRootW, PathIsUNCW, PathFindExtensionW, PathRemoveFileSpecW |
| ole32.dll | OleInitialize, CoFreeUnusedLibraries, OleUninitialize, CoInitializeEx, CreateILockBytesOnHGlobal, StgCreateDocfileOnILockBytes, StgOpenStorageOnILockBytes, CoGetClassObject, CoInitialize, CoUninitialize, OleCreateMenuDescriptor, CoTaskMemAlloc, ReleaseStgMedium, CoTaskMemFree, OleDestroyMenuDescriptor, OleTranslateAccelerator, IsAccelerator, OleLockRunning, CreateStreamOnHGlobal, OleIsCurrentClipboard, OleFlushClipboard, DoDragDrop, CLSIDFromString, CLSIDFromProgID, CoCreateGuid, RevokeDragDrop, CoLockObjectExternal, RegisterDragDrop, OleGetClipboard, OleDuplicateData, CoRegisterMessageFilter, CoCreateInstance, CoRevokeClassObject |
| OLEAUT32.dll | SysFreeString, VarBstrFromDate, VariantCopy, SafeArrayDestroy, SystemTimeToVariantTime, VariantTimeToSystemTime, OleCreateFontIndirect, SysStringLen, VariantInit, VariantChangeType, VariantClear, SysAllocStringLen, SysAllocString |
| oledlg.dll | OleUIBusyW |
| WS2_32.dll | WSAIoctl, htons, inet_ntoa, gethostbyname, gethostname, WSASocketW, WSAStartup, ntohs, recv, bind |
| OLEACC.dll | LresultFromObject, AccessibleObjectFromWindow, CreateStdAccessibleObject |
| gdiplus.dll | GdipGetImagePixelFormat, GdipGetImageHeight, GdipGetImageWidth, GdipCloneImage, GdipDrawImageRectI, GdipSetInterpolationMode, GdipGetImagePaletteSize, GdiplusShutdown, GdiplusStartup, GdipCreateBitmapFromHBITMAP, GdipDisposeImage, GdipDeleteGraphics, GdipAlloc, GdipFree, GdipGetImagePalette, GdipCreateBitmapFromStream, GdipCreateBitmapFromScan0, GdipBitmapLockBits, GdipBitmapUnlockBits, GdipGetImageGraphicsContext, GdipCreateFromHDC, GdipDrawImageI |
| IMM32.dll | ImmGetOpenStatus, ImmReleaseContext, ImmGetContext |
| WINMM.dll | PlaySoundW |
Possible Origin |
|---|
| Language of compilation system | Country where language is spoken | Map |
|---|---|---|
| Chinese | China |  |
| English | United States |  |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library NodeNetwork Behavior |
|---|
Network Port Distribution |
|---|
TCP Packets |
|---|
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Jan 24, 2021 10:23:23.492737055 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:23.493050098 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:23.493232012 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:23.493341923 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:23.493448019 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:23.493484020 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:23.493712902 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:23.493824005 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:23.493865967 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:23.503756046 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.503794909 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.503830910 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.503869057 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.503894091 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.503979921 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.504018068 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.504620075 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.504646063 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.504668951 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.504837036 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.504875898 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.505203962 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.505242109 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.505482912 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.505522966 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.505681992 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.505717039 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.505799055 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.505855083 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:23.506150961 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.506251097 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.506513119 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.506541967 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.626178026 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.626334906 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:28.676939011 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:28.677278996 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:28.677455902 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:28.677529097 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:28.677571058 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:28.677608013 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:28.677635908 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:28.677711964 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:28.677747011 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:28.677762985 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:28.677767992 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:28.686454058 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:28.686647892 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:28.686887026 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:28.687319994 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:28.687814951 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:28.687844992 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:28.687937021 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:28.688262939 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:28.688580036 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:28.688678026 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:28.688756943 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:28.688922882 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:28.689089060 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:28.689160109 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:28.689368963 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:28.689434052 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:28.689743042 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:28.689924002 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:28.720083952 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:28.720293045 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:28.755439043 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:23:28.755672932 CET | 49696 | 443 | 192.168.2.4 | 204.79.197.200 |
| Jan 24, 2021 10:23:37.462538004 CET | 49683 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:23:37.462593079 CET | 49682 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:23:37.462704897 CET | 49683 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:23:37.462745905 CET | 49682 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:23:37.499459982 CET | 443 | 49683 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.499675989 CET | 443 | 49683 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.499989986 CET | 443 | 49682 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.500017881 CET | 443 | 49682 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.553977013 CET | 443 | 49683 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.554744005 CET | 443 | 49682 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.645104885 CET | 443 | 49682 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.645154953 CET | 443 | 49682 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.645194054 CET | 443 | 49682 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.645241976 CET | 443 | 49682 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.645297050 CET | 443 | 49682 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.645302057 CET | 49682 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:23:37.645345926 CET | 49682 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:23:37.645354986 CET | 443 | 49682 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.645435095 CET | 49682 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:23:37.645481110 CET | 443 | 49682 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.645541906 CET | 443 | 49682 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.645591974 CET | 443 | 49682 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.645615101 CET | 49682 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:23:37.645648003 CET | 443 | 49683 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.645689964 CET | 443 | 49683 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.645725965 CET | 443 | 49683 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.645764112 CET | 443 | 49683 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.645801067 CET | 443 | 49683 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.645807028 CET | 49683 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:23:37.645837069 CET | 443 | 49683 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.645838022 CET | 49683 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:23:37.645874023 CET | 443 | 49683 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.645915031 CET | 49683 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:23:37.645931005 CET | 443 | 49683 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.645987034 CET | 443 | 49683 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.646002054 CET | 49683 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:23:37.686861992 CET | 49683 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:23:37.697947025 CET | 49682 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:23:44.404624939 CET | 49744 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:44.628895998 CET | 13527 | 49744 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:44.629020929 CET | 49744 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:44.673149109 CET | 49744 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:44.892343998 CET | 13527 | 49744 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:44.932837963 CET | 49744 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:45.670763016 CET | 49744 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:45.893397093 CET | 13527 | 49744 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:45.948796988 CET | 49744 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:49.980010986 CET | 13527 | 49744 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:49.994618893 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:50.026993036 CET | 49744 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:50.186917067 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:50.187036037 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:50.193909883 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:50.387290955 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:50.411216974 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:50.610318899 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:50.652071953 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:50.759540081 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:50.963913918 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:50.963973999 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:50.964061022 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:50.964103937 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:50.964139938 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:50.964200974 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.156513929 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.156574011 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.156611919 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.156658888 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.156680107 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.156770945 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.156811953 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.156830072 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.156867981 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.156903982 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.156936884 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.157119989 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.349153042 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.349229097 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.349268913 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.349322081 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.349366903 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.349406958 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.349477053 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.349519968 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.349538088 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.349575996 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.349631071 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.349673986 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.349726915 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.349766970 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.349803925 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.349841118 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.349877119 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.349896908 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.349946022 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.349986076 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.350016117 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.350043058 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.350085974 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.350173950 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.542428017 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.542546988 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.542587996 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.542634964 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.542674065 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.542704105 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.542759895 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.542800903 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.542840004 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.542848110 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.542865038 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.542913914 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.542951107 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.542988062 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.543021917 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.543028116 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.543055058 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.543097973 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.543144941 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.543188095 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.543222904 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.543231010 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.543251991 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.543289900 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.543327093 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.543365002 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.543396950 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.543402910 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.543423891 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.543462038 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.543500900 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.543540001 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.543574095 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.543585062 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.543644905 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.543694019 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.543729067 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.544234037 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.545517921 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.789244890 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.994138002 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.994185925 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.994221926 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.994277954 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.994292021 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.994347095 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.994389057 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.994426966 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.994462013 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.994478941 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.994518995 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.994558096 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.994613886 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.994626999 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.994636059 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.994688988 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.994756937 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.994805098 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.994833946 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.994873047 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.994910955 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.994950056 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.994997978 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995035887 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.995060921 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995099068 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995135069 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995170116 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995208979 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995225906 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.995270014 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995282888 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.995316982 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995352030 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995398045 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995440006 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995476961 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995517969 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995568037 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.995575905 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.995587111 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995625973 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995659113 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995697021 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995733023 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995779037 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995820045 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995839119 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.995846033 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.995883942 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995920897 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995956898 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.995990038 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.996009111 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.996016026 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.996048927 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.996084929 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.996121883 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.996159077 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.996175051 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.996186018 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.996227980 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.996268034 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.996304989 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.996336937 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.996356964 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.996364117 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.996397018 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.996433973 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.996469975 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:51.996522903 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:51.996534109 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.188680887 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.188730001 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.188767910 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.188790083 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.188832998 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.188877106 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.188992023 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.230405092 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.778477907 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.979238987 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.979288101 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.979325056 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.979362011 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.979389906 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.979429960 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.979448080 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.979487896 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.979523897 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.979542971 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.979597092 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.979652882 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.979665041 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.979716063 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.979763031 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.979773998 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.979813099 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.979849100 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.979871035 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.979918003 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.979973078 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.979986906 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.980030060 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980077982 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980089903 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.980128050 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980164051 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980180025 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.980217934 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980254889 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980271101 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.980309010 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980345964 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980376959 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980392933 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.980436087 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.980458975 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980506897 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980556011 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980566978 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.980606079 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980648994 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980659962 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.980698109 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980746984 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980757952 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.980792046 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980834007 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980844975 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.980882883 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980923891 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.980936050 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.980983973 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.981025934 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:52.981041908 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.981071949 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:52.981113911 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:53.118199110 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:53.365730047 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:53.814583063 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:53.814702988 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:53.859205008 CET | 49745 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:54.051073074 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:54.051347017 CET | 13527 | 49745 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:54.270224094 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:54.270334005 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:54.288530111 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:54.507450104 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:54.574243069 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:54.612688065 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:54.836000919 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:54.886840105 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:55.295989037 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:55.307897091 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:55.515795946 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:55.515813112 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:55.515820980 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:55.515970945 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:55.516011953 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:55.526813030 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:55.526993990 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:55.735239983 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:55.735272884 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:55.735299110 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:55.735323906 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:55.735451937 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:55.745811939 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:55.745851994 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:55.954360008 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:55.954396009 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:55.954477072 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:55.954575062 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:55.954715014 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:56.223587990 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:56.223792076 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:56.491796970 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:56.491944075 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:56.761743069 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:56.761857033 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:57.030440092 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:57.030524969 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:57.300798893 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:57.300970078 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:57.570388079 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:57.571827888 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:57.698775053 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:57.840342045 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:57.917685032 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:57.917718887 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:57.917814970 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:57.993100882 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:58.214649916 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:58.214685917 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:58.215725899 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:58.484622002 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:58.486310959 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:58.755295992 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:58.755490065 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:59.024013996 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:59.024091959 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:59.292634964 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:59.296293020 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:59.564798117 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:59.564878941 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:23:59.833225012 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:23:59.836514950 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:00.106441021 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:00.108120918 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:00.376741886 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:00.376991987 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:00.645517111 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:00.645638943 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:00.914259911 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:00.914372921 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:01.182372093 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:01.182488918 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:01.451486111 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:01.451598883 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:01.720177889 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:01.720314980 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:01.988185883 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:01.988405943 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:02.258222103 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:02.258667946 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:02.527736902 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:02.527841091 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:02.796634912 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:02.798907995 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:03.067519903 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:03.067601919 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:03.336163044 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:03.336451054 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:03.482877970 CET | 80 | 49688 | 93.184.220.29 | 192.168.2.4 |
| Jan 24, 2021 10:24:03.483721018 CET | 49688 | 80 | 192.168.2.4 | 93.184.220.29 |
| Jan 24, 2021 10:24:03.597266912 CET | 80 | 49687 | 93.184.220.29 | 192.168.2.4 |
| Jan 24, 2021 10:24:03.598772049 CET | 49687 | 80 | 192.168.2.4 | 93.184.220.29 |
| Jan 24, 2021 10:24:03.605046034 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:03.605139017 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:03.873642921 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:03.876305103 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:04.144437075 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:04.144527912 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:04.188651085 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:04.406955004 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:04.407644987 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:04.452977896 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:04.577502966 CET | 80 | 49711 | 93.184.220.29 | 192.168.2.4 |
| Jan 24, 2021 10:24:04.577620983 CET | 49711 | 80 | 192.168.2.4 | 93.184.220.29 |
| Jan 24, 2021 10:24:04.626560926 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:04.715922117 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:04.757339001 CET | 80 | 49712 | 93.184.220.29 | 192.168.2.4 |
| Jan 24, 2021 10:24:04.759186983 CET | 49712 | 80 | 192.168.2.4 | 93.184.220.29 |
| Jan 24, 2021 10:24:04.984618902 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:04.984940052 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:05.253281116 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:05.255887032 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:05.271456957 CET | 49713 | 443 | 192.168.2.4 | 104.79.89.181 |
| Jan 24, 2021 10:24:05.271657944 CET | 49714 | 80 | 192.168.2.4 | 93.184.220.29 |
| Jan 24, 2021 10:24:05.524389982 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:05.524590015 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:05.753616095 CET | 80 | 49707 | 93.184.220.29 | 192.168.2.4 |
| Jan 24, 2021 10:24:05.753742933 CET | 49707 | 80 | 192.168.2.4 | 93.184.220.29 |
| Jan 24, 2021 10:24:05.792771101 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:05.793199062 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:06.062020063 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:06.062305927 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:06.330858946 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:06.330975056 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:06.609314919 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:06.609409094 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:06.877954006 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:06.878751993 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:07.146608114 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:07.147188902 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:07.415678024 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:07.415781021 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:07.685522079 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:07.685849905 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:07.954140902 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:07.954351902 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:08.223099947 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:08.223467112 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:08.492399931 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:08.494678020 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:08.763119936 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:08.763338089 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:09.031897068 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:09.031997919 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:09.300657034 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:09.301146984 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:09.570686102 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:09.570786953 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:09.838772058 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:09.839318037 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:10.108814001 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:10.402307034 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:10.670810938 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:10.672283888 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:10.940509081 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:11.392703056 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:11.661114931 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:11.661201954 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:11.930252075 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:11.930355072 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:12.199026108 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:12.199130058 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:12.467624903 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:12.467708111 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:12.735907078 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:12.736166000 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:13.004185915 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:13.005191088 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:13.274581909 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:13.278134108 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:13.546989918 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:13.547348976 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:13.816880941 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:13.817001104 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:14.087378025 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:14.087476015 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:14.363312960 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:14.365601063 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:14.634673119 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:14.634782076 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:14.904660940 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:14.904779911 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:15.172898054 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:15.172988892 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:15.441334963 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:15.441540956 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:15.711215973 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:15.711436987 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:15.989732027 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:15.990199089 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:16.258379936 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:16.258465052 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:16.527291059 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:16.527455091 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:16.566608906 CET | 49744 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:16.798059940 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:16.800570965 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:16.838176966 CET | 13527 | 49744 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:17.069073915 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:17.069190979 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:17.337997913 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:17.338148117 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:17.606755018 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:17.607089996 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:17.876199007 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:17.877790928 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:18.146377087 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:18.146477938 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:18.414860010 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:18.416063070 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:18.684304953 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:18.685837984 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:18.954674006 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:18.956798077 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:19.225153923 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:19.225323915 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:19.494291067 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:19.497940063 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:19.766884089 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:19.767023087 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:20.036458969 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:20.036592007 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:20.304441929 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:20.304681063 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:20.574187994 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:20.574295998 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:20.842816114 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:20.843712091 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:21.112056971 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:21.113923073 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:21.382647038 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:21.382750988 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:21.651397943 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:21.651499033 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:21.929666996 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:21.929831028 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:22.198828936 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:22.200498104 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:22.468805075 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:22.470222950 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:22.738514900 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:22.738609076 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:23.007834911 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:23.008702993 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:23.277044058 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:23.277196884 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:23.546056032 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:23.546264887 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:23.815642118 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:23.815763950 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:24.084367037 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:24.084583044 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:24.352526903 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:24.353346109 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:24.622344017 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:24.623051882 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:24.891127110 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:24.892421961 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:25.161118031 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:25.161360025 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:25.440212011 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:25.442578077 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:25.710808039 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:25.713737011 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:25.805048943 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:25.903383017 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:25.982023001 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:26.023891926 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:26.035103083 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:26.123476982 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:26.143909931 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:26.254165888 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:26.254245996 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:26.362951040 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:26.364584923 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:26.523013115 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:26.526617050 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:26.633141041 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:26.634171009 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:26.793479919 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:26.904495955 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:26.906682968 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:27.175882101 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:27.178646088 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:27.447189093 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:27.450264931 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:27.718775034 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:27.893541098 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:28.162134886 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:28.162406921 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:28.431360960 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:28.664343119 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:28.933193922 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:28.933428049 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:29.203636885 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:29.203773022 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:29.471947908 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:29.472130060 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:29.740379095 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:29.740506887 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:30.009432077 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:30.009541988 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:30.279051065 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:30.279210091 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:30.548115969 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:30.548228979 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:30.816816092 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:30.817253113 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:31.086479902 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:31.086667061 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:31.355819941 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:31.355921984 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:31.625742912 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:31.625927925 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:31.894752026 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:31.895200968 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:32.163626909 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:32.163947105 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:32.434046030 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:32.434236050 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:32.702395916 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:32.705086946 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:32.973676920 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:32.973814011 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:33.244616032 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:33.244744062 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:33.513820887 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:33.513923883 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:33.783210039 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:33.783324003 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:34.051631927 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:34.051717997 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:34.329853058 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:34.333246946 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:34.602957964 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:34.603135109 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:34.871273994 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:34.874190092 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:35.143079042 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:35.143322945 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:35.412717104 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:35.414908886 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:35.683578968 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:35.687561989 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:35.956814051 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:35.959089041 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:36.228622913 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:36.228730917 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:36.496671915 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:36.496763945 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:36.764910936 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:36.767513990 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:37.036355019 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:37.039608002 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:37.308146000 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:37.311693907 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:37.589992046 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:37.590531111 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:37.858679056 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:37.858841896 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:38.127378941 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:38.127494097 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:38.395629883 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:38.395757914 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:38.664344072 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:38.664644957 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:38.933423042 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:38.933621883 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:39.203843117 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:39.203955889 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:39.472434044 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:39.472563028 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:39.741750002 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:39.743758917 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:40.012676954 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:40.012800932 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:40.281017065 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:40.281892061 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:40.559911966 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:40.561508894 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:40.830530882 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:40.834180117 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:41.102693081 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:41.107939005 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:41.376296043 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:41.376650095 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:41.645350933 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:41.647895098 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:41.916986942 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:41.917927027 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:42.186188936 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:42.186285973 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:42.455260038 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:42.456051111 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:42.724718094 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:42.725914955 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:42.994393110 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:42.994574070 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:43.262664080 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:43.262840033 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:43.531454086 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:43.531548023 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:43.800040960 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:43.800143957 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:44.069000959 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:44.072150946 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:44.340634108 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:44.344223022 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:44.612821102 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:44.612912893 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:44.883492947 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:44.884325027 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:45.154580116 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:45.156296015 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:45.426048994 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:45.428379059 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:45.696516037 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:45.700423002 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:45.969198942 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:46.025207996 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:46.293617964 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:46.293797970 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:46.562621117 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:46.562864065 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:46.832654953 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:46.832895994 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:47.103919983 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:47.104196072 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:47.373049021 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:47.530911922 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:47.799447060 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:47.799551010 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:48.067898035 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:48.068078041 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:48.336503983 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:48.336639881 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:48.563296080 CET | 49744 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:48.604945898 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:48.605097055 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:48.832588911 CET | 13527 | 49744 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:48.871464014 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:48.871565104 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:49.140199900 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:49.140345097 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:49.408720016 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:49.408828020 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:49.491842031 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:49.589169979 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:49.668848991 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:49.677587032 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:49.710947037 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:49.808396101 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:49.808531046 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:49.887806892 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:49.887897968 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:50.076951981 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:50.077136040 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:50.155924082 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:50.156117916 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:50.346848965 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:50.346959114 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:50.426770926 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:50.426847935 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:50.615374088 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:50.615545988 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:50.698685884 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:50.698919058 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:50.884274960 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:50.884433031 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:50.968293905 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:50.968377113 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:51.153485060 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:51.153713942 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:51.233433962 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:51.233550072 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:51.423113108 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:51.423212051 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:51.502192020 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:51.502307892 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:51.692327976 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:51.692431927 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:51.780338049 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:51.780431032 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:51.970549107 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:51.970638990 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:52.051393986 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:52.051599026 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:52.188894987 CET | 49681 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:24:52.188981056 CET | 49688 | 80 | 192.168.2.4 | 93.184.220.29 |
| Jan 24, 2021 10:24:52.189145088 CET | 49687 | 80 | 192.168.2.4 | 93.184.220.29 |
| Jan 24, 2021 10:24:52.189455986 CET | 49682 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:24:52.189517975 CET | 49683 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:24:52.208045959 CET | 80 | 49687 | 93.184.220.29 | 192.168.2.4 |
| Jan 24, 2021 10:24:52.208093882 CET | 80 | 49688 | 93.184.220.29 | 192.168.2.4 |
| Jan 24, 2021 10:24:52.208141088 CET | 49687 | 80 | 192.168.2.4 | 93.184.220.29 |
| Jan 24, 2021 10:24:52.208235979 CET | 49688 | 80 | 192.168.2.4 | 93.184.220.29 |
| Jan 24, 2021 10:24:52.226140976 CET | 443 | 49683 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:24:52.226186037 CET | 443 | 49682 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:24:52.226263046 CET | 49683 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:24:52.226301908 CET | 49682 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:24:52.226382971 CET | 443 | 49681 | 40.126.31.135 | 192.168.2.4 |
| Jan 24, 2021 10:24:52.226444960 CET | 49681 | 443 | 192.168.2.4 | 40.126.31.135 |
| Jan 24, 2021 10:24:52.238904953 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:52.239022970 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:52.319817066 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:52.319921970 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:52.507154942 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:52.507349968 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:52.589071989 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:52.589237928 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:52.775427103 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:52.775521040 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:52.857549906 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:52.857676029 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:53.044110060 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:53.044199944 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:53.127254963 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:53.127372026 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:53.316621065 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:53.316842079 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:53.397062063 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:53.397192955 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:53.585668087 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:53.585906982 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:53.665972948 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:53.666102886 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:53.857163906 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:53.857336044 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:53.934221029 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:53.934329033 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:54.125595093 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:54.125682116 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:54.203318119 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:54.203411102 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:54.395068884 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:54.395226002 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:54.472225904 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:54.472315073 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:54.663928032 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:54.664071083 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:54.741497993 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:54.741610050 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:54.932316065 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:54.932586908 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:55.010271072 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:55.010534048 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:55.210603952 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:55.210728884 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:55.278749943 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:55.278855085 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:55.479554892 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:55.479738951 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:55.547542095 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:55.547776937 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:55.748570919 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:55.748764038 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:55.816817045 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:55.816941023 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:56.016659975 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:56.016762972 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:56.084697008 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:56.084783077 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:56.439024925 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:57.141978979 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:58.439088106 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:58.658382893 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:58.658638954 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:58.926501036 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:58.926610947 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:59.198493004 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:59.198596001 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:59.467097044 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:59.467199087 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:24:59.736037016 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:24:59.736176014 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:00.004898071 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:00.009469986 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:00.279738903 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:00.279871941 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:00.548027992 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:00.548173904 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:00.816198111 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:00.816298008 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:01.084546089 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:01.084662914 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:01.353806019 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:01.353905916 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:01.622065067 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:01.622251034 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:01.900883913 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:01.901091099 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:02.169213057 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:02.169425011 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:02.437884092 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:02.438002110 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:02.706109047 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:02.706192017 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:02.974900007 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:02.975006104 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:03.245841980 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:03.246011972 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:03.516577005 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:03.516772985 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:03.785427094 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:03.785567999 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:04.054411888 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:04.054568052 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:04.322794914 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:04.322896957 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:04.591923952 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:04.592142105 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:04.862068892 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:04.862157106 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:05.140609026 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:05.140750885 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:05.318269968 CET | 443 | 49701 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:25:05.409532070 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:05.409619093 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:05.678798914 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:05.678910971 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:05.947104931 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:05.947381973 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:06.009604931 CET | 80 | 49707 | 93.184.220.29 | 192.168.2.4 |
| Jan 24, 2021 10:25:06.009776115 CET | 49707 | 80 | 192.168.2.4 | 93.184.220.29 |
| Jan 24, 2021 10:25:06.216638088 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:06.216909885 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:06.485739946 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:06.485903978 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:06.753957987 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:06.754064083 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:07.022171021 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:07.022286892 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:07.291866064 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:07.292124987 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:07.561003923 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:07.561110020 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:07.679440022 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:07.830420017 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:07.830729961 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:07.898576021 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:07.898680925 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:07.987287998 CET | 443 | 49702 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:25:08.100558996 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:08.100708961 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:08.167654037 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:08.167772055 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:08.278325081 CET | 443 | 49699 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:25:08.278882027 CET | 443 | 49705 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:25:08.368813992 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:08.368916035 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:08.439265013 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:08.549748898 CET | 443 | 49710 | 13.107.42.23 | 192.168.2.4 |
| Jan 24, 2021 10:25:08.637607098 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:08.637706995 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:08.669476032 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:08.888273954 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:08.888361931 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:08.936176062 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:09.157208920 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:09.157329082 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:09.426207066 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:09.426316023 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:09.695178986 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:09.695285082 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:09.699049950 CET | 443 | 49698 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:25:09.890197039 CET | 443 | 49700 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:25:09.959615946 CET | 443 | 49703 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:25:09.963783979 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:09.963912964 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:10.235433102 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:10.235539913 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:10.246742010 CET | 443 | 49708 | 13.107.5.88 | 192.168.2.4 |
| Jan 24, 2021 10:25:10.504143000 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:10.504251957 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:10.605376959 CET | 443 | 49704 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:25:10.772947073 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:10.773081064 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:11.041670084 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:11.041863918 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:11.142512083 CET | 443 | 49709 | 13.107.5.88 | 192.168.2.4 |
| Jan 24, 2021 10:25:11.310424089 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:11.310537100 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:11.579118967 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:11.579272032 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:11.847428083 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:11.847585917 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:11.989367008 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:12.092156887 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:12.116403103 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:12.170695066 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:12.172115088 CET | 443 | 49715 | 204.79.197.222 | 192.168.2.4 |
| Jan 24, 2021 10:25:12.208189964 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:12.208236933 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:12.250076056 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:12.311028004 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:12.311070919 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:12.389642954 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:12.389686108 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:12.389746904 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:12.469042063 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:12.469257116 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:12.659431934 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:12.662571907 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:12.738796949 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:12.738878012 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:12.939498901 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:12.939615965 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:13.009527922 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:13.009603024 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:13.210366964 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:13.210443020 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:13.278295994 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:13.434866905 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:13.479104996 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:13.653752089 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:13.653937101 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:13.922641993 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:13.922785997 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:14.193414927 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:14.193538904 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:14.461852074 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:14.462007999 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:14.483470917 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:14.702274084 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:14.702451944 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:14.761816025 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:14.981149912 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:14.981362104 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:15.241889954 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:15.242021084 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:15.510221958 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:15.510304928 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:15.778426886 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:15.778532982 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:16.060941935 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:16.061047077 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:16.329827070 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:16.330060005 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:16.598242044 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:16.598447084 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:16.866916895 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:16.867100000 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:17.135126114 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:17.135281086 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:17.403434038 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:17.403614044 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:17.672471046 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:17.672673941 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:17.941854000 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:17.941977024 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:18.210589886 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:18.210741997 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:18.479249001 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:18.479408026 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:18.747505903 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:18.747643948 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:19.016108990 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:19.301820993 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:19.429673910 CET | 49744 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:19.570580959 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:19.570741892 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:19.699790001 CET | 13527 | 49744 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:19.839732885 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:19.839920044 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:20.108160019 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:20.108325005 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:20.161662102 CET | 80 | 49707 | 93.184.220.29 | 192.168.2.4 |
| Jan 24, 2021 10:25:20.161837101 CET | 49707 | 80 | 192.168.2.4 | 93.184.220.29 |
| Jan 24, 2021 10:25:20.377080917 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:20.377254009 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:20.645407915 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:20.852606058 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:21.131155968 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:21.131283045 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:21.400587082 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:21.400790930 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:21.669661999 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:21.669862032 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:21.938733101 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:21.938947916 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:22.207583904 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:22.207676888 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:22.477802992 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:22.477909088 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:22.746829033 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:22.746915102 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:23.015248060 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:23.017405987 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:23.285511971 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:23.285794973 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:23.554758072 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:23.555485964 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:23.825571060 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:23.825710058 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:24.094038963 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:24.094124079 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:24.362963915 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:24.363495111 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:24.631658077 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:24.631743908 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:24.900302887 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:24.903404951 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:25.171988964 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:25.173912048 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:25.442148924 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:25.447627068 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:25.716079950 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:25.716372967 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:25.984467030 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:25.984622955 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:26.253187895 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:26.253884077 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:26.523453951 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:26.523643017 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:26.793775082 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:26.794178009 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:27.062589884 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:27.063272953 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:27.332279921 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:27.332389116 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:27.600822926 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:27.603584051 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:27.872706890 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:27.873569012 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:28.142493010 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:28.142584085 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:28.411519051 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:28.411621094 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:28.679925919 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:28.680083036 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:28.950053930 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:28.951919079 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:29.219504118 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:29.220015049 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:29.489149094 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:29.492090940 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:29.760782957 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:29.764039993 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:30.032726049 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:30.032829046 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:30.311604977 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:30.311722040 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:30.580347061 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:30.580459118 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:30.849612951 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:30.850210905 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:31.119383097 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:31.122268915 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:31.391403913 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:31.392136097 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:31.660047054 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:31.660253048 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:31.928343058 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:31.928462982 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:32.198287010 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:32.198410034 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:32.466777086 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:32.466887951 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:32.735479116 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:32.735675097 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:33.004374981 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:33.004971981 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:33.274585009 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:33.274689913 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:33.543323994 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:33.543417931 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:33.821815014 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:33.821902990 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:34.089786053 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:34.091139078 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:34.359627008 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:34.359741926 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:34.628345013 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:34.628453016 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:34.897989035 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:34.898721933 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:34.994081974 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:35.167524099 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:35.167637110 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:35.212827921 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:35.436116934 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:35.436244965 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:35.704838991 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:35.705209017 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:35.789550066 CET | 443 | 49696 | 204.79.197.200 | 192.168.2.4 |
| Jan 24, 2021 10:25:35.973540068 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:35.974869013 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:36.038981915 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:36.243877888 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:36.244633913 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:36.257977009 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:36.514252901 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:36.514350891 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:36.785731077 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:36.785995007 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:37.055166960 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:37.055274010 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:37.323863983 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:37.324106932 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:37.548943996 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:37.592978954 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:37.673412085 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:37.767819881 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:37.767844915 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:37.768060923 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:37.870428085 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:37.892501116 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:38.037353992 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:38.037563086 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:38.089272022 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:38.089548111 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:38.308374882 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:38.308840036 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:38.577912092 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:38.578017950 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:38.846225977 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:38.846391916 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:39.115302086 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:39.115736008 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:39.384159088 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:39.384387970 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:39.652415991 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:39.653819084 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:39.921762943 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:39.921943903 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:40.189997911 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:40.190288067 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:40.459741116 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:40.460187912 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:40.728326082 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:40.732275963 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:41.000852108 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:41.001213074 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:41.270035028 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:41.270123005 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:41.538613081 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:41.538708925 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:41.806782961 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:41.806895018 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:42.075192928 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:42.075742006 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:42.345067978 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:42.345768929 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:42.614276886 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:42.614376068 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:42.885521889 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:42.885649920 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:43.155566931 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:43.155860901 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:43.424901009 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:43.425229073 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:43.694047928 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:43.694153070 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:43.962793112 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:43.962922096 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:44.230937004 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:44.231046915 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:44.499701023 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:44.499792099 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:44.769310951 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:44.770132065 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:45.039064884 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:45.039186001 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:45.307105064 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:45.307214975 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:45.575519085 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:45.575668097 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:45.845530987 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:45.845948935 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:46.114037037 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:46.114161968 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:46.382684946 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:46.382801056 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:46.650896072 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:46.651015997 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:46.919786930 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:46.921416998 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:47.189661026 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:47.190571070 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:47.458534002 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:47.458667040 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:47.727315903 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:47.727509975 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:47.996248960 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:47.996428013 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:48.264758110 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:48.265588045 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:48.534209967 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:48.537630081 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:48.804461956 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:48.804667950 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:49.073492050 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:49.073601007 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:49.345246077 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:49.345331907 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:49.614111900 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:49.614449978 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:49.882350922 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:49.883657932 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:50.161946058 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:50.162249088 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:50.430856943 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:50.431824923 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:50.701349020 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:50.701440096 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:50.957868099 CET | 49744 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:50.971667051 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:50.972004890 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:51.232930899 CET | 13527 | 49744 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:51.240814924 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:51.240953922 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:51.509495020 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:51.509670973 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:51.777699947 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:51.777831078 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:52.045835972 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:52.045934916 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:52.314860106 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:52.314974070 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:52.583288908 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:52.585428953 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:52.853586912 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:52.853761911 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:53.131726980 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:53.134107113 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:53.403244972 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:53.403343916 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:53.674995899 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:53.676291943 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:53.944113970 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:53.944233894 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:54.068289995 CET | 49744 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:54.068381071 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
| Jan 24, 2021 10:25:54.212507010 CET | 13527 | 49746 | 110.92.66.246 | 192.168.2.4 |
| Jan 24, 2021 10:25:54.212594986 CET | 49746 | 13527 | 192.168.2.4 | 110.92.66.246 |
UDP Packets |
|---|
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Jan 24, 2021 10:23:13.309921980 CET | 55854 | 53 | 192.168.2.4 | 8.8.8.8 |
| Jan 24, 2021 10:23:13.332984924 CET | 53 | 55854 | 8.8.8.8 | 192.168.2.4 |
| Jan 24, 2021 10:23:13.920188904 CET | 64549 | 53 | 192.168.2.4 | 8.8.8.8 |
| Jan 24, 2021 10:23:13.943337917 CET | 53 | 64549 | 8.8.8.8 | 192.168.2.4 |
| Jan 24, 2021 10:23:14.716948032 CET | 63153 | 53 | 192.168.2.4 | 8.8.8.8 |
| Jan 24, 2021 10:23:14.740032911 CET | 53 | 63153 | 8.8.8.8 | 192.168.2.4 |
| Jan 24, 2021 10:23:15.511826038 CET | 52991 | 53 | 192.168.2.4 | 8.8.8.8 |
| Jan 24, 2021 10:23:15.535604000 CET | 53 | 52991 | 8.8.8.8 | 192.168.2.4 |
| Jan 24, 2021 10:23:16.968394041 CET | 53700 | 53 | 192.168.2.4 | 8.8.8.8 |
| Jan 24, 2021 10:23:16.991550922 CET | 53 | 53700 | 8.8.8.8 | 192.168.2.4 |
| Jan 24, 2021 10:23:17.860275030 CET | 51726 | 53 | 192.168.2.4 | 8.8.8.8 |
| Jan 24, 2021 10:23:17.883440971 CET | 53 | 51726 | 8.8.8.8 | 192.168.2.4 |
| Jan 24, 2021 10:23:19.125066996 CET | 56794 | 53 | 192.168.2.4 | 8.8.8.8 |
| Jan 24, 2021 10:23:19.150897026 CET | 53 | 56794 | 8.8.8.8 | 192.168.2.4 |
| Jan 24, 2021 10:23:19.983750105 CET | 56534 | 53 | 192.168.2.4 | 8.8.8.8 |
| Jan 24, 2021 10:23:20.006917000 CET | 53 | 56534 | 8.8.8.8 | 192.168.2.4 |
| Jan 24, 2021 10:23:20.637813091 CET | 56627 | 53 | 192.168.2.4 | 8.8.8.8 |
| Jan 24, 2021 10:23:20.664338112 CET | 53 | 56627 | 8.8.8.8 | 192.168.2.4 |
| Jan 24, 2021 10:23:21.486450911 CET | 56621 | 53 | 192.168.2.4 | 8.8.8.8 |
| Jan 24, 2021 10:23:21.512278080 CET | 53 | 56621 | 8.8.8.8 | 192.168.2.4 |
| Jan 24, 2021 10:23:22.337990046 CET | 63116 | 53 | 192.168.2.4 | 8.8.8.8 |
| Jan 24, 2021 10:23:22.361217976 CET | 53 | 63116 | 8.8.8.8 | 192.168.2.4 |
| Jan 24, 2021 10:23:23.166867018 CET | 64078 | 53 | 192.168.2.4 | 8.8.8.8 |
| Jan 24, 2021 10:23:23.201261997 CET | 53 | 64078 | 8.8.8.8 | 192.168.2.4 |
| Jan 24, 2021 10:23:37.773974895 CET | 64801 | 53 | 192.168.2.4 | 8.8.8.8 |
| Jan 24, 2021 10:23:37.796924114 CET | 53 | 64801 | 8.8.8.8 | 192.168.2.4 |
| Jan 24, 2021 10:23:40.221301079 CET | 61721 | 53 | 192.168.2.4 | 8.8.8.8 |
| Jan 24, 2021 10:23:40.253931046 CET | 53 | 61721 | 8.8.8.8 | 192.168.2.4 |
| Jan 24, 2021 10:24:03.344569921 CET | 51255 | 53 | 192.168.2.4 | 8.8.8.8 |
| Jan 24, 2021 10:24:03.370654106 CET | 53 | 51255 | 8.8.8.8 | 192.168.2.4 |
| Jan 24, 2021 10:24:32.072946072 CET | 61522 | 53 | 192.168.2.4 | 8.8.8.8 |
| Jan 24, 2021 10:24:32.110757113 CET | 53 | 61522 | 8.8.8.8 | 192.168.2.4 |
HTTP Request Dependency Graph |
|---|
|
HTTP Packets |
|---|
| Session ID | Source IP | Source Port | Destination IP | Destination Port | Process |
|---|---|---|---|---|---|
| 0 | 192.168.2.4 | 49744 | 110.92.66.246 | 13527 | C:\Users\user\Desktop\#U5e74#U7ec8#U63d0#U6210#U5206#U7ea2#U6838#U5bf9#U8868@i4.exe |
| Timestamp | kBytes transferred | Direction | Data |
|---|---|---|---|
| Jan 24, 2021 10:23:44.673149109 CET | 405 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | Process |
|---|---|---|---|---|---|
| 1 | 110.92.66.246 | 13527 | 192.168.2.4 | 49744 | C:\Users\user\zT6Nm@i4\PMRunner64.exe |
| Timestamp | kBytes transferred | Direction | Data |
|---|---|---|---|
| Jan 24, 2021 10:23:44.892343998 CET | 406 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | Process |
|---|---|---|---|---|---|
| 2 | 192.168.2.4 | 49745 | 110.92.66.246 | 13527 | C:\Users\user\Desktop\#U5e74#U7ec8#U63d0#U6210#U5206#U7ea2#U6838#U5bf9#U8868@i4.exe |
| Timestamp | kBytes transferred | Direction | Data |
|---|---|---|---|
| Jan 24, 2021 10:23:50.193909883 CET | 407 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | Process |
|---|---|---|---|---|---|
| 3 | 110.92.66.246 | 13527 | 192.168.2.4 | 49745 | C:\Users\user\zT6Nm@i4\PMRunner64.exe |
| Timestamp | kBytes transferred | Direction | Data |
|---|---|---|---|
| Jan 24, 2021 10:23:50.387290955 CET | 407 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | Process |
|---|---|---|---|---|---|
| 4 | 192.168.2.4 | 49746 | 110.92.66.246 | 13527 | C:\Users\user\Desktop\#U5e74#U7ec8#U63d0#U6210#U5206#U7ea2#U6838#U5bf9#U8868@i4.exe |
| Timestamp | kBytes transferred | Direction | Data |
|---|---|---|---|
| Jan 24, 2021 10:23:54.288530111 CET | 607 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | Process |
|---|---|---|---|---|---|
| 5 | 110.92.66.246 | 13527 | 192.168.2.4 | 49746 | C:\Users\user\zT6Nm@i4\PMRunner64.exe |
| Timestamp | kBytes transferred | Direction | Data |
|---|---|---|---|
| Jan 24, 2021 10:23:54.507450104 CET | 607 | IN |
Code Manipulations |
|---|
Statistics |
|---|
CPU Usage |
|---|
Click to jump to process
Memory Usage |
|---|
Click to jump to process
High Level Behavior Distribution |
|---|
back
Click to dive into process behavior distribution
Behavior |
|---|
Click to jump to process
System Behavior |
|---|
General |
|---|
| Start time: | 10:23:18 |
| Start date: | 24/01/2021 |
| Path: | C:\Users\user\Desktop\#U5e74#U7ec8#U63d0#U6210#U5206#U7ea2#U6838#U5bf9#U8868@i4.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x140000000 |
| File size: | 3150336 bytes |
| MD5 hash: | 6665909A2652C5860FD874CB15C3991C |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | low |
General |
|---|
| Start time: | 10:23:22 |
| Start date: | 24/01/2021 |
| Path: | C:\Users\user\zT6Nm@i4\zr.exe |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0x400000 |
| File size: | 461088 bytes |
| MD5 hash: | 045FCBE6C174AFA9A6A998BDD6F9FAD7 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Antivirus matches: | |
| Reputation: | low |
General |
|---|
| Start time: | 10:23:22 |
| Start date: | 24/01/2021 |
| Path: | C:\Windows\System32\conhost.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff724c50000 |
| File size: | 625664 bytes |
| MD5 hash: | EA777DEEA782E8B4D7C7C33BBF8A4496 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
General |
|---|
| Start time: | 10:23:24 |
| Start date: | 24/01/2021 |
| Path: | C:\Windows\System32\cmd.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff622070000 |
| File size: | 273920 bytes |
| MD5 hash: | 4E2ACF4F8A396486AB4268C94A6A245F |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
General |
|---|
| Start time: | 10:23:24 |
| Start date: | 24/01/2021 |
| Path: | C:\Windows\System32\conhost.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff724c50000 |
| File size: | 625664 bytes |
| MD5 hash: | EA777DEEA782E8B4D7C7C33BBF8A4496 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
General |
|---|
| Start time: | 10:23:28 |
| Start date: | 24/01/2021 |
| Path: | C:\ProgramData\Microsoft\zr.exe |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0x400000 |
| File size: | 461088 bytes |
| MD5 hash: | 045FCBE6C174AFA9A6A998BDD6F9FAD7 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Antivirus matches: | |
| Reputation: | low |
General |
|---|
| Start time: | 10:23:28 |
| Start date: | 24/01/2021 |
| Path: | C:\Windows\System32\conhost.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff724c50000 |
| File size: | 625664 bytes |
| MD5 hash: | EA777DEEA782E8B4D7C7C33BBF8A4496 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
General |
|---|
| Start time: | 10:23:37 |
| Start date: | 24/01/2021 |
| Path: | C:\Users\user\zT6Nm@i4\PMRunner64.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff7a5160000 |
| File size: | 271704 bytes |
| MD5 hash: | 65DBB57517611D9DE8CE522022DCD727 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Antivirus matches: | |
| Reputation: | low |
General |
|---|
| Start time: | 10:23:48 |
| Start date: | 24/01/2021 |
| Path: | C:\Users\user\zT6Nm@i4\PMRunner64.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff7a5160000 |
| File size: | 271704 bytes |
| MD5 hash: | 65DBB57517611D9DE8CE522022DCD727 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | low |
General |
|---|
| Start time: | 10:23:56 |
| Start date: | 24/01/2021 |
| Path: | C:\Users\user\zT6Nm@i4\PMRunner64.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff7a5160000 |
| File size: | 271704 bytes |
| MD5 hash: | 65DBB57517611D9DE8CE522022DCD727 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | low |
Disassembly |
|---|
Code Analysis |
|---|
Execution Graph |
|---|
| Execution Coverage: | 3.2% |
| Dynamic/Decrypted Code Coverage: | 12% |
| Signature Coverage: | 24.6% |
| Total number of Nodes: | 1374 |
| Total number of Limit Nodes: | 59 |
Graph
Executed Functions |
|---|
Function 00000001800090C0, Relevance: 83.1, APIs: 19, Strings: 28, Instructions: 864filesleepCOMMON
Download Yara Rule
Control-flow Graph |
|---|
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014002007C, Relevance: 51.4, APIs: 34, Instructions: 370stringCOMMON
Download Yara Rule
Control-flow Graph |
|---|
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400206A8, Relevance: 40.4, APIs: 11, Strings: 12, Instructions: 185libraryloaderCOMMON
Download Yara Rule
Control-flow Graph |
|---|
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140001D04, Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 136networkCOMMON
Download Yara Rule
Control-flow Graph |
|---|
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000180002D40, Relevance: 16.0, APIs: 3, Strings: 6, Instructions: 228sleepCOMMON
Download Yara Rule
Control-flow Graph |
|---|
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Control-flow Graph |
|---|
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140032378, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 54libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140011818, Relevance: .8, Instructions: 784COMMON
Download Yara Rule
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Control-flow Graph |
|---|
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014000DD34, Relevance: 24.2, APIs: 16, Instructions: 169windowCOMMON
Download Yara Rule
Control-flow Graph |
|---|
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001800078D0, Relevance: 16.0, APIs: 6, Strings: 3, Instructions: 220filetimeCOMMON
Download Yara Rule
Control-flow Graph |
|---|
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140001FB0, Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 154windowCOMMON
Download Yara Rule
Control-flow Graph |
|---|
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Control-flow Graph |
|---|
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140019BFC, Relevance: 15.1, APIs: 10, Instructions: 112memoryCOMMONLIBRARYCODE
Download Yara Rule
Control-flow Graph |
|---|
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140011140, Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 113COMMON
Download Yara Rule
Control-flow Graph |
|---|
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140014E80, Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 60COMMON
Download Yara Rule
Control-flow Graph |
|---|
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000180001730, Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 41COMMON
Download Yara Rule
Control-flow Graph |
|---|
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400D87FC, Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 40COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140003E74, Relevance: 4.6, APIs: 3, Instructions: 145COMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140002DC8, Relevance: 4.6, APIs: 3, Instructions: 66registryCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014015F848, Relevance: 4.5, APIs: 3, Instructions: 46memoryCOMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000180002BC0, Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 88COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140001B30, Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 36COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014015C584, Relevance: 2.5, APIs: 2, Instructions: 35sleepCOMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140001434, Relevance: 1.6, APIs: 1, Instructions: 57COMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014015C604, Relevance: 1.3, APIs: 1, Instructions: 36sleepCOMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140002D74, Relevance: 1.3, APIs: 1, Instructions: 22COMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Non-executed Functions |
|---|
Function 00000001400BE1D0, Relevance: 42.4, APIs: 23, Strings: 1, Instructions: 364COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014004472C, Relevance: 39.4, APIs: 26, Instructions: 445keyboardCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140018EA0, Relevance: 38.8, APIs: 21, Strings: 1, Instructions: 296windowCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140076074, Relevance: 36.6, APIs: 24, Instructions: 556windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400BE798, Relevance: 33.6, APIs: 18, Strings: 1, Instructions: 310windowCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140024BFC, Relevance: 33.5, APIs: 18, Strings: 1, Instructions: 233windowCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140018AB8, Relevance: 31.8, APIs: 17, Strings: 1, Instructions: 250windowCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014007AAC4, Relevance: 30.3, APIs: 20, Instructions: 343keyboardwindowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014007A4D8, Relevance: 28.9, APIs: 19, Instructions: 417windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400DE6A4, Relevance: 28.4, APIs: 12, Strings: 4, Instructions: 367COMMON
Download Yara Rule
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014010E08C, Relevance: 28.3, APIs: 15, Strings: 1, Instructions: 342COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140002220, Relevance: 26.4, APIs: 11, Strings: 4, Instructions: 133networkwindowCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014005A694, Relevance: 25.7, APIs: 17, Instructions: 241windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400900A0, Relevance: 18.2, APIs: 12, Instructions: 219windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140021100, Relevance: 18.1, APIs: 12, Instructions: 140windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140090DC0, Relevance: 16.6, APIs: 11, Instructions: 95windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140014AD0, Relevance: 15.2, APIs: 10, Instructions: 250filecommemoryCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140091184, Relevance: 15.1, APIs: 10, Instructions: 134windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014005A1C4, Relevance: 14.2, APIs: 7, Strings: 1, Instructions: 202COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140074934, Relevance: 13.7, APIs: 9, Instructions: 187windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400365D8, Relevance: 13.7, APIs: 9, Instructions: 155windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400DC700, Relevance: 12.2, APIs: 8, Instructions: 158windowclipboardCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140154B40, Relevance: 12.1, APIs: 8, Instructions: 67COMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400223C0, Relevance: 10.7, APIs: 7, Instructions: 220filestringCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014006CC48, Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 120stringCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140090C1C, Relevance: 10.6, APIs: 7, Instructions: 113windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014015C7A0, Relevance: 9.1, APIs: 6, Instructions: 80COMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014003910C, Relevance: 9.0, APIs: 2, Strings: 3, Instructions: 262libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014015892C, Relevance: 7.6, APIs: 5, Instructions: 80memorythreadCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400768F8, Relevance: 7.4, APIs: 3, Strings: 1, Instructions: 431keyboardCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014005EAE4, Relevance: 4.8, APIs: 3, Instructions: 267keyboardCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014005C3D4, Relevance: 3.8, APIs: 1, Strings: 1, Instructions: 314COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140162354, Relevance: 3.2, APIs: 2, Instructions: 235COMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140078D58, Relevance: .3, Instructions: 310COMMON
Download Yara Rule
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140046614, Relevance: .2, Instructions: 183COMMON
Download Yara Rule
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001401660E0, Relevance: 107.7, APIs: 86, Instructions: 180COMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400161FC, Relevance: 47.7, APIs: 26, Strings: 1, Instructions: 423windowCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400BEEE4, Relevance: 44.0, APIs: 24, Strings: 1, Instructions: 268windowCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014001E9C8, Relevance: 28.1, APIs: 7, Strings: 9, Instructions: 66libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014003B03C, Relevance: 26.5, APIs: 14, Strings: 1, Instructions: 256keyboardwindowCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140020E68, Relevance: 24.2, APIs: 16, Instructions: 168windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140012AF0, Relevance: 22.9, APIs: 11, Strings: 2, Instructions: 132COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140066268, Relevance: 22.7, APIs: 15, Instructions: 204windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400C4FEC, Relevance: 21.2, APIs: 3, Strings: 9, Instructions: 178COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014007E950, Relevance: 19.5, APIs: 9, Strings: 2, Instructions: 201windowCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400C4D3C, Relevance: 19.4, APIs: 2, Strings: 9, Instructions: 184COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140070A50, Relevance: 18.2, APIs: 12, Instructions: 220windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014007C080, Relevance: 17.7, APIs: 9, Strings: 1, Instructions: 207stringwindowCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014016AA3C, Relevance: 16.8, APIs: 11, Instructions: 254COMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014007325C, Relevance: 16.6, APIs: 11, Instructions: 129windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140074718, Relevance: 15.9, APIs: 1, Strings: 8, Instructions: 155COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400DE140, Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 145COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140052EE8, Relevance: 15.9, APIs: 7, Strings: 2, Instructions: 117windowCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140132140, Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 116COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140042FAC, Relevance: 15.3, APIs: 10, Instructions: 284windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140090948, Relevance: 15.1, APIs: 10, Instructions: 126windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140020D24, Relevance: 15.1, APIs: 10, Instructions: 98threadCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400485A0, Relevance: 14.2, APIs: 4, Strings: 4, Instructions: 207COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140066D3C, Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 72windowthreadCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140022DCC, Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 66COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140042350, Relevance: 13.7, APIs: 9, Instructions: 192windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140014858, Relevance: 13.7, APIs: 9, Instructions: 162windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014006E474, Relevance: 13.6, APIs: 9, Instructions: 138windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140084340, Relevance: 13.6, APIs: 9, Instructions: 134timekeyboardCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400722D0, Relevance: 13.6, APIs: 9, Instructions: 112windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014015500C, Relevance: 13.6, APIs: 9, Instructions: 89COMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140080CB8, Relevance: 12.7, APIs: 6, Strings: 1, Instructions: 401COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140004404, Relevance: 12.5, APIs: 5, Strings: 2, Instructions: 279memoryCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400DEF9C, Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 262COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014007C8E8, Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 73COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140044EA0, Relevance: 12.3, APIs: 8, Instructions: 312timewindowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014006A09C, Relevance: 12.2, APIs: 8, Instructions: 235windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014000F078, Relevance: 12.1, APIs: 8, Instructions: 139windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140038490, Relevance: 12.1, APIs: 8, Instructions: 136windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400C30F0, Relevance: 12.1, APIs: 8, Instructions: 136windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400808BC, Relevance: 12.1, APIs: 8, Instructions: 96windowtimeCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014015E3F8, Relevance: 12.1, APIs: 8, Instructions: 59COMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014005099C, Relevance: 10.7, APIs: 7, Instructions: 232windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014000EC68, Relevance: 10.7, APIs: 3, Strings: 3, Instructions: 178libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140022C18, Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 143stringCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014006EDD4, Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 133windowCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140066B7C, Relevance: 10.6, APIs: 7, Instructions: 119windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014007F208, Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 118COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400268A8, Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 107comCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400708C4, Relevance: 10.6, APIs: 7, Instructions: 105windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140006224, Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 102registryCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400040E0, Relevance: 10.6, APIs: 7, Instructions: 100COMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140038CB0, Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 78libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140070DB0, Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 72windowCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400547B0, Relevance: 10.6, APIs: 7, Instructions: 68keyboardCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140164FA4, Relevance: 10.6, APIs: 7, Instructions: 67COMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014000307C, Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 51libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140003130, Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 49libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400A21D8, Relevance: 9.1, APIs: 6, Instructions: 109keyboardtimewindowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140006604, Relevance: 9.1, APIs: 6, Instructions: 72registryCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014008004C, Relevance: 9.1, APIs: 6, Instructions: 54windowtimeCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014015AA58, Relevance: 9.0, APIs: 6, Instructions: 37threadCOMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400489E8, Relevance: 9.0, APIs: 2, Strings: 3, Instructions: 238COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140032C58, Relevance: 9.0, APIs: 3, Strings: 2, Instructions: 235stringCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140032FF0, Relevance: 8.9, APIs: 2, Strings: 3, Instructions: 184COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140134BC4, Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 175COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400070C4, Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 155registryCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140077154, Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 145COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140006EA0, Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 138registryCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400A07A8, Relevance: 8.9, APIs: 2, Strings: 3, Instructions: 137COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400A0970, Relevance: 8.9, APIs: 2, Strings: 3, Instructions: 106COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014000E870, Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 100windowCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014000EAF4, Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 94libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014004ABB0, Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 89windowCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400060F0, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 66registrylibraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140038BE4, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 52libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140006038, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 48registrylibraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140064E18, Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 48windowCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014001A3D0, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 40libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400351F8, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 40libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140006C80, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 39registrylibraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140006A50, Relevance: 7.7, APIs: 5, Instructions: 155registryCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140070230, Relevance: 7.6, APIs: 5, Instructions: 122windowmemoryCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140002948, Relevance: 7.6, APIs: 5, Instructions: 93libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014000CDDC, Relevance: 7.5, APIs: 5, Instructions: 45registryCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014015AD50, Relevance: 7.5, APIs: 5, Instructions: 39timethreadCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400381DC, Relevance: 7.5, APIs: 5, Instructions: 33COMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140159088, Relevance: 7.5, APIs: 5, Instructions: 31COMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140050614, Relevance: 7.3, APIs: 3, Strings: 1, Instructions: 259COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400622F0, Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 220COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014007D1D0, Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 165COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140052CAC, Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 157COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400671FC, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 138COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014003ADC8, Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 127COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140068650, Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 115COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400488A8, Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 95COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014001087C, Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 55libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400368D4, Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 54libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140034D1C, Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 53libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140132084, Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 44COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014004EB50, Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 43COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014004C8A4, Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 38COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014000E1EC, Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 31libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014000E2C4, Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 31libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014009A2FC, Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 31libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014000E3E4, Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 31libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140066A3C, Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 31libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014007CB18, Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 31libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014007CC54, Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 31libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140069034, Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 31libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140069154, Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 31libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140009168, Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 31libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014005E7A0, Relevance: 6.2, APIs: 4, Instructions: 218keyboardCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014006C528, Relevance: 6.2, APIs: 4, Instructions: 167windowmemoryCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014001C50C, Relevance: 6.1, APIs: 4, Instructions: 142registryCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014007217C, Relevance: 6.1, APIs: 4, Instructions: 67stringwindowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014008521C, Relevance: 6.1, APIs: 4, Instructions: 64windowtimeCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140056A0C, Relevance: 6.1, APIs: 4, Instructions: 63keyboardCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140006544, Relevance: 6.1, APIs: 4, Instructions: 53registryCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400546F4, Relevance: 6.0, APIs: 4, Instructions: 46keyboardCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140062630, Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 263COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014003ADB4, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 180COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140032970, Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 160COMMON
Download Yara Rule
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014006E19C, Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133windowCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140036DD8, Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 130COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140048E6C, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 114COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014007CD9C, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 96COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140058FEC, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 90COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140154E5C, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 86COMMONLIBRARYCODE
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014003C48C, Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 69libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014004E91C, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 57COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014007E008, Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 55COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 00000001400C0440, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 52registryclipboardCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014007AFDC, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 48keyboardwindowCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014004C208, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 44COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 0000000140154E44, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 42COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014009D010, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 42COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014001EB28, Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 39libraryloaderCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014001E158, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 37COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014004C0C4, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 31COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |
Function 000000014004C848, Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 22COMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Uniqueness |
Uniqueness Score: -1.00% |