Edit tour

Windows Analysis Report
bUBL.exe

Overview

General Information

Sample name:	bUBL.exe
Analysis ID:	1427753
MD5:	c0bf09b4829bef52bac3d6fc6758ccd9
SHA1:	964c2ee33ab5b14dafb08cf0c58e908467226487
SHA256:	b255d7d07da3fce68de66f3b0ea1cc08931e1f2d6514a19442e51269f2277e1b
Tags:	exenjRat
Infos:

Detection

Njrat

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Njrat

.NET source code contains potential unpacker

.NET source code references suspicious native API functions

C2 URLs / IPs found in malware configuration

Contains functionality to log keystrokes (.Net Source)

Machine Learning detection for sample

Uses dynamic DNS services

Allocates memory with a write watch (potentially for evading sandboxes)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Classification

Process Tree

System is w10x64

bUBL.exe (PID: 7300 cmdline: "C:\Users\user\Desktop\bUBL.exe" MD5: C0BF09B4829BEF52BAC3D6FC6758CCD9)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
NjRAT	RedPacket Security describes NJRat as "a remote access trojan (RAT) has capabilities to log keystrokes, access the victim's camera, steal credentials stored in browsers, open a reverse shell, upload/download files, view the victim's desktop, perform process, file, and registry manipulations, and capabilities to let the attacker update, uninstall, restart, close, disconnect the RAT and rename its campaign ID. Through the Command & Control (CnC) server software, the attacker has capabilities to create and configure the malware to spread through USB drives."It is supposedly popular with actors in the Middle East. Similar to other RATs, many leaked builders may be backdoored.	AQUATIC PANDA Earth Lusca Operation C-Major The Gorgon Group	http://blog.trendmicro.com/trendlabs-security-intelligence/new-rats-emerge-from-leaked-njw0rm-source-code/ http://blogs.360.cn/post/analysis-of-apt-c-37.html http://threatgeek.typepad.com/files/fta-1009---njrat-uncovered-1.pdf https://about.fb.com/news/2021/04/taking-action-against-hackers-in-palestine/ https://asec.ahnlab.com/1369	https://malpedia.caad.fkie.fraunhofer.de/details/win.njrat

Malware Configuration

Threatname: Njrat

{"Host": "rusia.duckdns.org", "Port": "1994", "Campaign ID": "NYAN CAT", "Network Seprator": "@!#&^%$", "Registry": "f2887c56e8ee"}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
bUBL.exe	JoeSecurity_Njrat	Yara detected Njrat	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000000.00000000.1652854625.0000000000C82000.00000002.00000001.01000000.00000003.sdmp	JoeSecurity_Njrat	Yara detected Njrat	Joe Security
Process Memory Space: bUBL.exe PID: 7300	JoeSecurity_Njrat	Yara detected Njrat	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
0.0.bUBL.exe.c80000.0.unpack	JoeSecurity_Njrat	Yara detected Njrat	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 46.246.14.17

Timestamp:	04/18/24-04:09:04.784855
SID:	2825563
Source Port:	49730
Destination Port:	1994
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 46.246.14.17

Timestamp:	04/18/24-04:09:04.460316
SID:	2033132
Source Port:	49730
Destination Port:	1994
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 46.246.14.17

Timestamp:	04/18/24-04:12:15.095393
SID:	2825564
Source Port:	49730
Destination Port:	1994
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: bUBL.exe

Avira: detected

Found malware configuration

Source: 00000000.00000000.1652854625.0000000000C82000.00000002.00000001.01000000.00000003.sdmp

Malware Configuration Extractor: Njrat {"Host": "rusia.duckdns.org", "Port": "1994", "Campaign ID": "NYAN CAT", "Network Seprator": "@!#&^%$", "Registry": "f2887c56e8ee"}

Multi AV Scanner detection for domain / URL

Source: rusia.duckdns.org	Virustotal: Detection: 17%			Perma Link
Source: rusia.duckdns.org	Virustotal: Detection: 17%			Perma Link

Multi AV Scanner detection for submitted file

Source: bUBL.exe

Virustotal: Detection: 76%

Perma Link

Yara detected Njrat

Source: Yara match	File source: bUBL.exe, type: SAMPLE
Source: Yara match	File source: 0.0.bUBL.exe.c80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1652854625.0000000000C82000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: bUBL.exe PID: 7300, type: MEMORYSTR

Machine Learning detection for sample

Source: bUBL.exe

Joe Sandbox ML: detected

Source: bUBL.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\Desktop\bUBL.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Source: bUBL.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49730 -> 46.246.14.17:1994
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49730 -> 46.246.14.17:1994
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49730 -> 46.246.14.17:1994

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: rusia.duckdns.org

Uses dynamic DNS services

Source: unknown

DNS query: name: rusia.duckdns.org

Source: global traffic

TCP traffic: 192.168.2.4:49730 -> 46.246.14.17:1994

Source: Joe Sandbox View

ASN Name: PORTLANEwwwportlanecomSE PORTLANEwwwportlanecomSE

Source: unknown

UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: C:\Users\user\Desktop\bUBL.exe

Code function: 0_2_0126A186 recv,

0_2_0126A186

Source: unknown

DNS traffic detected: queries for: rusia.duckdns.org

Key, Mouse, Clipboard, Microphone and Screen Capturing

Contains functionality to log keystrokes (.Net Source)

Source: bUBL.exe, Keylogger.cs

.Net Code: VKCodeToUnicode

E-Banking Fraud

Yara detected Njrat

Source: Yara match	File source: bUBL.exe, type: SAMPLE
Source: Yara match	File source: 0.0.bUBL.exe.c80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1652854625.0000000000C82000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: bUBL.exe PID: 7300, type: MEMORYSTR

Source: C:\Users\user\Desktop\bUBL.exe

Code function: 0_2_018319F0

0_2_018319F0

Source: bUBL.exe, 00000000.00000002.4122479852.000000000142E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamemscorwks.dllT vs bUBL.exe
Source: bUBL.exe, 00000000.00000000.1652883446.0000000000C88000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameClient123.exe4 vs bUBL.exe
Source: bUBL.exe	Binary or memory string: OriginalFilenameClient123.exe4 vs bUBL.exe

Source: bUBL.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@1/0@1/1

Source: C:\Users\user\Desktop\bUBL.exe	Code function: 0_2_056322AA AdjustTokenPrivileges,		0_2_056322AA
Source: C:\Users\user\Desktop\bUBL.exe	Code function: 0_2_05632273 AdjustTokenPrivileges,		0_2_05632273

Source: C:\Users\user\Desktop\bUBL.exe	Mutant created: NULL
Source: C:\Users\user\Desktop\bUBL.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\.net clr networking
Source: C:\Users\user\Desktop\bUBL.exe	Mutant created: \Sessions\1\BaseNamedObjects\f2887c56e8ee

Source: bUBL.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: bUBL.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.79%

Source: C:\Users\user\Desktop\bUBL.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: bUBL.exe

Virustotal: Detection: 76%

Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Section loaded: winmm.dll	Jump to behavior

Source: C:\Users\user\Desktop\bUBL.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\bUBL.exe

File opened: C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

Jump to behavior

Source: bUBL.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: C:\Users\user\Desktop\bUBL.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Source: bUBL.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Data Obfuscation

.NET source code contains potential unpacker

Source: bUBL.exe, Program.cs

.Net Code: Plugin System.Reflection.Assembly.Load(byte[])

Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\bUBL.exe	Memory allocated: 1410000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Memory allocated: 3360000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Memory allocated: 1620000 memory commit \| memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\bUBL.exe	Window / User API: threadDelayed 3751	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Window / User API: threadDelayed 5536	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe	Window / User API: foregroundWindowGot 1767	Jump to behavior

Source: C:\Users\user\Desktop\bUBL.exe TID: 7304	Thread sleep count: 223 > 30	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe TID: 7304	Thread sleep time: -223000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe TID: 7364	Thread sleep count: 3751 > 30	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe TID: 7304	Thread sleep count: 5536 > 30	Jump to behavior
Source: C:\Users\user\Desktop\bUBL.exe TID: 7304	Thread sleep time: -5536000s >= -30000s	Jump to behavior

Source: bUBL.exe, 00000000.00000002.4122479852.000000000145E000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\bUBL.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\bUBL.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

.NET source code references suspicious native API functions

Source: bUBL.exe, Program.cs	Reference to suspicious API methods: capGetDriverDescriptionA(wDriver, ref lpszName, cbName, ref lpszVer, 100)
Source: bUBL.exe, Keylogger.cs	Reference to suspicious API methods: MapVirtualKey(a, 0u)
Source: bUBL.exe, Keylogger.cs	Reference to suspicious API methods: GetAsyncKeyState(num2)

Source: bUBL.exe, 00000000.00000002.4123512883.00000000033BA000.00000004.00000800.00020000.00000000.sdmp, bUBL.exe, 00000000.00000002.4123512883.00000000033DA000.00000004.00000800.00020000.00000000.sdmp, bUBL.exe, 00000000.00000002.4123512883.00000000033CC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager
Source: bUBL.exe, 00000000.00000002.4123512883.00000000033BA000.00000004.00000800.00020000.00000000.sdmp, bUBL.exe, 00000000.00000002.4123512883.00000000033DA000.00000004.00000800.00020000.00000000.sdmp, bUBL.exe, 00000000.00000002.4123512883.00000000033CC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager@9

Source: C:\Users\user\Desktop\bUBL.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\bUBL.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected Njrat

Source: Yara match	File source: bUBL.exe, type: SAMPLE
Source: Yara match	File source: 0.0.bUBL.exe.c80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1652854625.0000000000C82000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: bUBL.exe PID: 7300, type: MEMORYSTR

Remote Access Functionality

Yara detected Njrat

Source: Yara match	File source: bUBL.exe, type: SAMPLE
Source: Yara match	File source: 0.0.bUBL.exe.c80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1652854625.0000000000C82000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: bUBL.exe PID: 7300, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	1 DLL Side-Loading	1 Access Token Manipulation	2 Virtualization/Sandbox Evasion	1 Input Capture	1 Security Software Discovery	Remote Services	1 Input Capture	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Process Injection	1 Disable or Modify Tools	LSASS Memory	2 Virtualization/Sandbox Evasion	Remote Desktop Protocol	1 Archive Collected Data	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	1 Access Token Manipulation	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Process Injection	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	1 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Software Packing	LSA Secrets	12 System Information Discovery	SSH	Keylogging	21 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
bUBL.exe	76%	Virustotal		Browse
bUBL.exe	100%	Avira	TR/Dropper.Gen7
bUBL.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
rusia.duckdns.org	17%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
rusia.duckdns.org	17%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
rusia.duckdns.org	46.246.14.17	true	true	17%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
rusia.duckdns.org	true	17%, Virustotal, Browse	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
46.246.14.17	rusia.duckdns.org	Sweden		42708	PORTLANEwwwportlanecomSE	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1427753
Start date and time:	2024-04-18 04:08:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	5
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	bUBL.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@1/0@1/1
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 79 Number of non-executed functions: 1
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
04:09:36	API Interceptor	681282x Sleep call for process: bUBL.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
46.246.14.17	Bomolovo.exe	Get hash	malicious	Njrat	Browse
46.246.14.17	a1.exe	Get hash	malicious	GuLoader	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
rusia.duckdns.org	x6Xw7vcuD9zM.exe	Get hash	malicious	Njrat	Browse	46.246.14.23
	bTAB.exe	Get hash	malicious	Njrat	Browse	46.246.80.3
	xbd0vU3xnyOS.exe	Get hash	malicious	Njrat	Browse	46.246.6.7
	x38kbgLd6bPu.exe	Get hash	malicious	Njrat	Browse	46.246.12.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
PORTLANEwwwportlanecomSE	bUBD.exe	Get hash	malicious	Njrat	Browse	46.246.14.22
	xutnF2gKGTTy.exe	Get hash	malicious	AsyncRAT	Browse	46.246.4.3
	8ubQTzsAqG.exe	Get hash	malicious	Unknown	Browse	185.117.88.39
	8ubQTzsAqG.exe	Get hash	malicious	Unknown	Browse	185.117.88.39
	ODOCVzwXq5.elf	Get hash	malicious	Mirai	Browse	195.190.218.30
	bSRh.exe	Get hash	malicious	XWorm	Browse	46.246.86.13
	xjwP3UYA8ujq.exe	Get hash	malicious	AsyncRAT, DcRat	Browse	46.246.82.6
	x6Xw7vcuD9zM.exe	Get hash	malicious	Njrat	Browse	46.246.14.23
	xw8oKxLrOnt6.exe	Get hash	malicious	Remcos	Browse	46.246.14.10
	xde47dUIgZDh.exe	Get hash	malicious	AsyncRAT	Browse	46.246.6.20

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	3.8033745834534862
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.79% Win32 Executable (generic) a (10002005/4) 49.75% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Windows Screen Saver (13104/52) 0.07% Win16/32 Executable Delphi generic (2074/23) 0.01%
File name:	bUBL.exe
File size:	32'768 bytes
MD5:	c0bf09b4829bef52bac3d6fc6758ccd9
SHA1:	964c2ee33ab5b14dafb08cf0c58e908467226487
SHA256:	b255d7d07da3fce68de66f3b0ea1cc08931e1f2d6514a19442e51269f2277e1b
SHA512:	929b5ca4b80115db96bc73eeb596cea902b002a8b970733d8b075c0bf0b6105dd71956f341771d3b4d5d89ccdd9ba809cb480882da87370b8f925032486cfb1c
SSDEEP:	384:v0bUe5XB4e0XzObWiaXLilpknDNWThtTUFQqz9MBObbx:ET9BuqZaXWlBibx
TLSH:	E5E2F84677B58229C6BC5BF88CB313110772E3438532EB6F5CDC98CA1B67AD04245EEA
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...wq f.................P... ......ng... ........@.. ....................................@................................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x40676e
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x66207177 [Thu Apr 18 01:03:51 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6718	0x53	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x8000	0x2a8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xa000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x4774	0x5000	612bf40dea40eeef1b7b7c60041c4994	False	0.475146484375	data	5.293438354193768	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0x8000	0x2a8	0x1000	965765eb9b660ef9d1684a23b882d62e	False	0.077880859375	data	0.6845844623997	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xa000	0xc	0x1000	34585954bedb30c5084980db7d41ad8f	False	0.0087890625	data	0.013126943721219527	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_VERSION	0x8058	0x24c	data			0.467687074829932

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
04/18/24-04:09:04.784855	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49730	1994	192.168.2.4	46.246.14.17
04/18/24-04:09:04.460316	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49730	1994	192.168.2.4	46.246.14.17
04/18/24-04:12:15.095393	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49730	1994	192.168.2.4	46.246.14.17

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 04:09:04.102600098 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:09:04.375896931 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:09:04.376071930 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:09:04.460315943 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:09:04.784775019 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:09:04.784854889 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:09:05.111363888 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:09:09.964248896 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:09:10.298871994 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:09:10.665880919 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:09:10.670995951 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:09:10.991708994 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:09:28.731656075 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:09:28.731988907 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:09:29.055531979 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:09:46.793765068 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:09:46.829411983 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:09:47.155106068 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:04.167609930 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:04.486107111 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:04.828511953 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:04.828794003 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:05.153630972 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:05.573971987 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:05.897546053 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:11.918371916 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:12.254964113 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:12.255059004 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:12.580893040 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:13.120481968 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:13.437572956 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:13.437700987 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:13.763725996 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:13.763907909 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:14.028497934 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:14.088982105 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:14.089118958 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:14.302795887 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:14.303121090 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:14.414822102 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:14.414937973 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:14.633603096 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:14.633847952 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:14.741641045 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:14.741739988 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:14.959742069 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:14.959968090 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:15.068790913 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:15.069021940 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:15.287769079 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:15.287957907 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:15.395843983 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:15.396056890 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:15.613075018 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:15.613250017 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:15.720998049 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:15.721215963 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:15.933490992 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:15.938988924 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:16.045922995 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:16.046008110 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:16.205828905 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:16.206077099 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:16.371346951 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:16.371623993 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:16.526174068 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:16.526490927 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:16.696299076 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:16.696774006 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:16.882942915 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:16.883074999 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:17.053138971 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:17.053325891 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:17.209208012 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:17.209300995 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:17.378568888 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:17.378712893 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:17.552788019 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:17.555372000 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:17.715954065 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:17.719741106 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:17.876223087 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:17.879156113 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:18.047841072 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:18.051546097 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:18.202107906 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:18.202838898 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:18.373219967 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:18.376837015 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:18.527131081 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:18.527239084 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:18.697803974 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:18.698251963 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:18.854780912 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:18.855321884 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:19.024698019 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:19.024820089 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:19.180535078 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:19.180629015 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:19.352482080 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:19.352654934 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:19.505527020 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:19.505897045 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:19.676915884 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:19.677126884 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:19.830657005 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:19.830872059 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:20.002479076 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:20.002636909 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:20.155462027 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:20.155714035 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:20.326531887 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:20.326668024 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:20.480516911 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:20.480657101 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:20.652776957 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:20.652906895 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:20.806653023 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:20.806839943 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:20.977791071 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:20.977943897 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:21.131567955 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:21.131684065 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:21.302727938 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:21.303025007 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:21.457746983 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:21.457828045 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:21.628621101 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:21.628724098 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:21.782541990 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:21.782644987 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:21.952713013 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:21.952928066 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:22.110106945 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:22.110245943 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:22.294996977 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:22.295145988 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:22.436053991 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:22.436208010 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:22.621867895 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:22.622330904 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:22.790754080 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:22.790875912 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:22.902390957 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:22.902502060 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:23.117810011 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:23.117944956 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:23.232659101 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:23.232841969 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:23.445863008 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:23.448884964 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:23.552977085 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:23.553073883 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:23.772803068 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:23.775708914 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:23.865947962 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:23.867685080 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:24.098623037 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:24.099769115 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:24.191747904 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:24.194960117 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:24.425890923 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:24.427174091 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:24.514921904 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:24.519304037 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:24.746685982 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:24.746901989 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:24.839631081 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:25.073422909 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:25.073589087 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:25.398920059 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:25.399091959 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:25.726555109 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:25.726742029 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:26.052897930 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:27.490000010 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:27.782913923 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:27.809145927 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:27.809411049 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:28.055545092 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:28.055761099 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:28.131051064 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:28.131134987 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:28.347953081 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:28.379573107 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:28.379818916 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:28.458483934 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:28.458611965 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:28.620364904 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:28.620490074 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:28.706557035 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:28.706638098 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:28.785661936 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:28.785769939 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:28.928579092 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:28.928730011 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:29.032862902 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:29.032995939 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:29.111556053 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:29.111727953 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:29.252532005 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:29.252794981 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:29.359523058 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:29.359632015 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:29.437928915 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:29.438091040 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:29.576392889 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:29.576489925 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:29.685723066 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:29.685837984 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:29.763679028 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:29.763849974 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:29.902292967 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:29.902400017 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:30.009360075 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:30.009443998 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:30.087718010 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:30.087935925 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:30.229087114 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:30.229257107 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:30.335478067 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:30.335692883 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:30.413768053 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:30.413902998 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:30.552288055 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:30.552469969 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:30.662374020 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:30.662483931 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:30.741050005 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:30.741175890 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:30.879137039 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:30.879827976 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:30.989912987 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:30.990066051 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:31.066749096 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:31.066876888 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:31.204871893 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:31.204987049 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:31.312613964 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:31.312872887 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:31.390619040 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:31.390789032 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:31.528348923 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:31.528534889 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:31.637136936 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:31.637233019 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:31.714457989 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:31.714540958 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:31.853970051 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:31.854063988 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:31.931756020 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:31.931875944 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:32.039410114 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:32.039591074 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:32.179518938 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:32.179713011 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:32.258219957 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:32.258335114 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:32.382837057 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:32.382935047 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:32.505527973 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:32.505623102 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:32.602205992 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:32.602277994 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:32.708705902 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:32.708921909 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:32.832494020 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:32.835637093 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:32.926117897 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:32.927642107 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:33.052725077 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:33.056891918 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:33.159615993 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:33.162880898 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:33.252635002 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:33.255358934 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:33.376930952 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:33.379225969 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:33.488418102 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:33.491976023 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:33.578284025 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:33.578398943 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:33.702670097 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:33.702794075 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:33.810509920 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:33.810806990 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:33.905358076 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:33.905540943 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:34.029400110 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:34.029901028 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:34.139571905 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:34.139754057 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:34.233782053 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:34.234208107 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:34.357060909 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:34.357251883 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:34.466645002 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:34.467252016 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:34.559766054 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:34.559942007 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:34.686414003 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:34.686578035 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:34.794586897 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:34.794760942 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:34.885732889 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:34.885900021 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:34.949068069 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:34.949188948 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:34.962538958 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:34.962692022 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:35.118154049 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:35.118262053 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:35.209482908 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:35.209698915 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:35.235531092 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:35.235711098 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:35.441792011 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:35.442039013 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:35.507867098 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:35.508042097 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:35.768774033 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:35.773124933 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:35.831969976 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:35.832902908 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:36.091236115 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:36.093142033 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:36.152894974 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:36.153024912 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:36.417568922 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:36.418967009 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:36.480298996 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:36.480531931 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:36.743432999 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:36.743598938 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:36.805510998 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:36.805733919 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:37.070396900 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:37.070852995 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:37.133575916 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:37.134110928 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:37.407429934 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:37.408186913 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:37.726634979 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:37.736428976 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:37.736776114 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:37.970318079 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:37.970489025 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:38.022048950 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:38.022089958 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:38.022244930 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:38.077430964 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:38.077548027 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:38.293715000 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:38.293827057 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:38.338907957 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:38.339076042 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:38.402628899 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:38.402786016 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:38.610404968 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:38.611419916 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:38.729235888 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:38.729850054 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:38.931318998 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:38.931458950 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:39.056164980 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:39.056976080 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:39.259272099 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:39.260996103 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:39.382563114 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:39.385025978 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:39.587543964 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:39.587699890 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:39.709232092 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:39.709424019 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:39.909977913 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:39.910120010 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:40.035357952 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:40.035487890 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:40.233722925 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:40.233843088 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:40.356314898 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:40.356539011 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:40.558541059 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:40.558703899 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:40.682435989 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:40.682625055 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:40.892646074 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:40.892770052 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:40.976648092 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:40.976761103 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:41.165920019 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:41.166081905 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:41.305358887 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:41.305474043 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:41.491746902 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:41.491852999 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:41.631490946 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:41.633028984 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:41.817770004 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:41.820988894 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:41.955954075 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:41.956964016 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:42.155627966 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:42.156933069 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:42.281008005 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:42.284984112 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:42.482721090 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:42.482848883 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:42.606473923 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:42.606697083 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:42.816998959 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:42.817106962 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:42.933207035 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:42.933320999 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:43.134082079 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:43.134222984 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:43.259984016 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:43.461730957 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:43.461833000 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:43.776268005 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:43.776596069 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:43.978187084 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:43.978312969 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:44.103751898 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:45.662291050 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:45.872422934 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:45.981189966 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:45.981312037 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:46.146502972 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:46.146684885 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:46.307539940 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:46.307636023 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:46.462346077 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:46.462588072 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:46.630398035 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:46.630500078 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:46.788407087 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:46.788500071 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:46.961296082 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:46.961512089 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:46.985663891 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:46.985785007 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:47.060986042 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:47.061183929 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:47.258369923 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:47.258512020 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:47.394443035 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:47.394532919 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:47.615183115 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:47.615281105 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:47.715241909 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:47.716965914 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:47.901894093 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:47.932687998 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:47.932954073 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:48.059381962 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:48.059490919 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:48.174787045 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:48.176970005 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:48.264050007 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:48.268965960 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:48.381664038 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:48.385044098 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:48.504151106 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:48.507385969 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:48.596873045 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:48.597037077 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:48.709726095 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:48.709870100 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:48.833405972 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:48.833539009 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:48.924537897 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:48.924678087 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:49.032335043 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:49.032720089 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:49.156244993 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:49.156539917 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:49.253812075 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:49.253918886 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:49.360786915 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:49.360972881 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:49.481405020 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:49.481540918 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:49.580528975 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:49.580884933 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:49.683619022 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:49.687280893 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:49.807745934 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:49.808027029 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:49.903266907 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:49.903372049 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:49.995244026 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:49.995394945 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:50.134782076 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:50.135278940 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:50.176620007 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:50.176760912 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:50.320974112 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:50.323117018 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:50.452748060 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:50.453566074 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:50.652071953 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:50.652189970 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:50.769751072 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:50.769913912 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:50.970622063 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:50.970803022 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:51.095953941 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:51.096143961 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:51.300741911 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:51.300863981 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:51.423008919 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:51.423218966 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:51.624645948 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:51.624748945 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:51.745619059 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:51.745816946 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:51.973380089 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:51.973464012 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:52.072041035 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:52.072326899 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:52.289191008 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:52.289484978 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:52.414849043 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:52.415034056 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:52.637612104 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:52.639206886 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:52.738755941 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:52.739113092 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:52.955890894 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:52.961092949 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:53.003597975 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:53.005064964 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:53.019289970 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:53.021032095 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:53.281883001 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:53.284979105 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:53.344382048 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:53.345191002 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:53.606770992 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:53.607008934 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:53.668870926 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:53.668962002 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:53.922079086 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:53.922322035 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:53.983072042 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:53.983278036 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:54.244947910 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:54.245124102 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:54.307641029 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:54.307866096 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:54.569114923 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:54.569294930 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:54.631731987 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:54.631896973 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:54.894042969 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:54.894177914 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:54.956437111 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:54.956538916 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:55.218596935 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:55.218744993 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:55.279978991 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:55.280113935 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:55.544872046 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:55.544986010 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:55.607112885 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:55.607182026 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:55.871987104 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:55.872137070 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:55.931926012 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:55.932188988 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:56.009002924 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:56.009216070 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:56.195934057 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:56.196084976 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:56.203999043 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:56.334218979 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:56.334445000 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:56.521300077 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:56.521548986 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:56.661124945 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:56.661375046 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:56.847295046 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:56.847410917 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:56.992763996 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:56.992927074 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:57.171303988 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:57.171586990 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:57.310501099 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:57.311009884 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:57.497474909 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:57.497623920 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:57.655484915 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:57.655647993 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:57.824742079 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:57.825153112 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:57.978646994 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:57.979101896 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:58.149463892 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:58.149805069 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:58.304600954 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:58.304774046 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:58.461313009 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:58.461819887 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:58.631635904 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:58.631792068 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:58.788870096 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:58.789091110 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:58.963121891 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:58.963299036 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:59.023494959 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:59.023767948 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:59.113953114 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:59.114343882 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:59.235480070 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:59.235605001 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:59.347601891 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:59.347687960 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:59.439902067 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:59.440012932 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:59.549232006 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:59.549439907 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:59.672656059 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:59.672843933 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:59.765456915 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:59.765701056 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:59.874356985 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:59.874530077 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:10:59.997920036 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:10:59.998104095 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:00.091881037 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:00.092041969 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:00.197235107 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:00.197453976 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:00.320713997 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:00.320830107 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:00.414741993 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:00.414963007 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:00.522928953 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:00.523119926 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:00.645836115 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:00.645927906 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:00.737993002 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:00.845858097 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:00.845963001 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:00.970534086 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:00.970705986 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:01.172266006 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:01.172486067 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:01.294996023 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:01.295142889 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:01.495752096 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:01.495834112 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:01.619992971 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:01.620544910 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:01.810013056 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:01.820979118 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:01.824971914 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:01.946010113 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:01.948980093 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:02.024111032 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:02.024615049 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:02.083456039 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:02.083486080 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:02.083622932 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:02.147553921 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:02.148988008 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:02.270713091 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:02.273094893 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:02.350313902 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:02.352972984 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:02.411273003 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:02.412976027 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:02.472932100 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:02.477013111 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:02.596694946 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:02.597002029 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:02.675872087 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:02.675998926 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:02.735342979 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:02.735439062 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:02.797823906 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:02.797909975 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:02.947818995 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:02.947937965 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:03.061815977 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:03.062035084 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:03.125418901 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:03.125679970 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:03.263076067 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:03.263174057 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:03.387451887 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:03.387624025 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:03.449559927 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:03.449742079 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:03.590152025 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:03.590290070 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:03.717494965 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:03.717722893 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:03.763319969 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:03.763462067 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:03.904222012 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:03.904375076 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:04.036488056 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:04.037003040 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:04.233401060 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:04.237004995 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:04.354393005 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:04.354922056 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:04.544044018 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:04.554377079 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:04.556982994 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:04.677938938 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:04.678105116 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:04.820751905 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:04.820877075 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:04.880336046 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:04.880537033 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:05.003248930 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:05.003345966 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:05.034822941 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:05.034976959 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:05.094011068 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:05.094141006 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:05.205701113 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:05.205811024 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:05.307478905 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:05.307600021 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:05.422162056 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:05.422257900 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:05.530940056 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:05.531068087 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:05.637943983 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:05.638024092 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:05.747126102 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:05.747205973 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:05.855279922 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:05.855401039 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:05.965296030 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:05.965526104 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:06.073013067 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:06.073296070 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:06.181097984 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:06.181282043 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:06.289525032 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:06.289863110 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:06.403721094 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:06.403902054 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:06.507350922 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:06.507478952 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:06.616004944 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:06.616142035 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:06.729145050 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:06.729254007 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:06.834101915 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:06.834213018 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:06.940414906 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:06.940531969 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:07.048778057 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:07.048894882 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:07.156303883 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:07.156426907 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:07.265784025 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:07.265855074 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:07.373852015 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:07.373936892 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:07.482275009 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:07.482378006 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:07.590583086 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:07.590683937 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:07.700236082 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:07.703021049 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:07.806770086 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:07.807079077 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:07.916429996 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:07.919078112 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:08.024406910 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:08.027364969 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:08.041310072 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:08.043087006 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:08.078490019 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:08.079108953 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:08.240488052 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:08.243035078 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:08.298449039 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:08.300184965 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:08.315536976 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:08.316265106 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:08.397515059 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:08.397680998 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:08.568691015 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:08.571194887 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:08.587686062 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:08.591487885 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:08.709673882 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:08.709831953 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:08.865258932 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:08.865459919 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:09.022588015 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:09.022675037 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:09.194072008 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:09.194175005 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:09.347696066 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:09.347843885 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:09.519202948 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:09.519359112 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:09.673580885 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:09.673780918 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:09.844917059 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:09.849034071 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:10.003329039 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:10.005038023 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:10.171812057 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:10.171911001 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:10.327347994 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:10.329113960 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:10.495805025 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:10.497015953 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:10.652724028 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:10.652861118 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:10.821082115 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:10.821186066 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:10.975229979 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:10.975307941 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:11.038295031 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:11.038363934 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:11.093643904 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:11.093708038 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:11.271127939 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:11.303380966 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:11.303508997 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:11.364213943 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:11.364289999 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:11.410875082 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:11.410960913 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:11.545036077 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:11.545165062 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:11.625894070 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:11.626013041 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:11.683645964 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:11.685026884 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:11.868799925 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:11.878422976 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:11.878520966 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:11.956239939 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:11.957029104 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:11.998066902 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:11.998127937 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:12.144922972 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:12.149163961 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:12.199345112 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:12.201020002 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:12.300152063 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:12.300302029 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:12.322971106 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:12.325007915 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:12.462665081 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:12.465087891 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:12.540385962 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:12.541013002 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:12.599783897 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:12.599886894 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:12.788494110 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:12.788569927 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:12.867511034 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:12.867615938 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:12.940339088 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:12.940478086 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:13.115468979 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:13.115619898 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:13.210690022 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:13.210757017 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:13.258920908 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:13.258996010 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:13.443799973 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:13.444046974 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:13.531184912 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:13.531399012 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:13.771224976 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:13.771944046 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:13.850155115 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:13.851411104 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:14.038716078 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:14.041037083 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:14.044266939 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:14.044375896 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:14.045749903 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:14.178484917 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:14.181293964 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:14.318478107 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:14.321069956 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:14.503048897 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:14.504163027 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:14.640166998 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:14.640233040 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:14.829600096 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:14.829727888 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:14.967526913 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:14.967664957 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:15.153191090 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:15.153296947 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:15.293972969 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:15.294086933 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:15.470088005 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:15.478682995 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:15.478811026 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:15.619474888 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:15.619620085 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:15.742724895 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:15.742820024 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:15.805718899 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:15.805798054 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:15.944286108 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:15.944467068 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:16.068558931 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:16.068860054 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:16.130728006 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:16.130906105 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:16.268521070 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:16.268676043 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:16.392054081 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:16.458111048 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:16.458201885 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:16.596750975 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:16.596995115 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:16.779876947 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:16.779999971 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:16.919689894 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:17.074095964 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:17.106657028 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:17.136065006 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:17.355928898 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:17.356081009 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:18.310019016 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:18.567873001 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:18.631685019 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:18.631845951 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:18.840317011 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:18.840775967 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:18.944037914 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:18.946573019 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:19.158876896 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:19.159003973 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:19.265933037 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:19.266078949 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:19.482388020 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:19.482534885 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:19.592791080 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:19.592967987 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:19.805660963 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:19.808588028 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:19.919090986 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:19.919286966 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:20.057213068 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:20.057626963 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:20.080085039 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:20.080229044 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:20.080524921 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:20.242355108 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:20.242654085 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:20.359077930 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:20.359172106 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:20.567082882 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:20.567495108 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:20.675003052 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:20.675167084 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:20.893492937 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:20.893826008 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:21.000642061 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:21.000751972 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:21.207354069 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:21.219213963 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:21.219497919 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:21.327332020 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:21.327989101 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:21.479501963 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:21.479643106 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:21.544271946 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:21.544357061 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:21.654393911 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:21.654588938 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:21.795151949 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:21.795495987 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:21.872383118 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:21.872766972 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:21.999723911 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:21.999932051 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:22.121556044 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:22.121992111 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:22.199309111 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:22.199417114 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:22.326036930 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:22.326157093 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:22.447967052 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:22.448110104 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:22.538470030 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:22.538604021 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:22.649240971 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:22.649348021 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:22.774183989 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:22.774322033 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:22.854862928 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:22.854940891 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:22.977540016 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:22.977686882 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:23.070142984 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:23.070456028 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:23.198661089 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:23.199039936 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:23.304981947 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:23.305216074 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:23.395340919 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:23.395555973 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:23.519584894 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:23.519798040 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:23.626810074 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:23.627012968 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:23.717968941 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:23.721127033 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:23.844965935 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:23.849142075 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:23.961788893 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:23.965084076 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:24.046224117 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:24.047028065 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:24.172190905 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:24.175283909 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:24.280846119 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:24.283090115 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:24.372073889 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:24.372236967 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:24.496469975 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:24.496591091 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:24.605735064 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:24.605812073 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:24.698412895 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:24.698499918 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:24.822710037 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:24.822792053 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:24.932303905 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:24.932380915 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:25.025490999 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:25.025692940 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:25.150196075 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:25.150450945 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:25.261097908 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:25.261425972 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:25.353641987 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:25.353730917 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:25.477159977 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:25.477300882 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:25.584342957 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:25.584427118 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:25.676426888 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:25.676508904 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:25.803436041 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:25.807538986 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:25.909543037 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:25.909728050 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:26.003376961 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:26.007457972 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:26.079618931 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:26.083152056 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:26.128017902 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:26.131246090 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:26.234380960 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:26.235380888 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:26.281663895 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:26.283303022 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:26.405066967 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:26.405531883 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:26.554635048 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:26.554833889 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:26.731890917 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:26.732450962 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:26.873389959 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:26.873774052 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:27.057378054 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:27.057642937 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:27.196839094 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:27.196958065 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:27.388947010 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:27.389174938 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:27.522835970 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:27.523137093 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:27.707374096 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:27.707676888 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:27.846749067 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:27.846865892 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:28.045826912 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:28.046025991 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:28.171869040 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:28.171999931 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:28.373769999 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:28.373980045 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:28.496166945 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:28.496341944 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:28.697755098 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:28.698045015 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:28.823079109 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:28.823271036 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:29.025597095 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:29.029355049 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:29.104285002 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:29.108017921 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:29.348289967 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:29.349487066 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:29.438949108 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:29.441318989 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:29.672151089 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:29.672806978 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:29.767365932 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:29.767636061 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:29.997059107 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:29.997298002 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:30.090053082 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:30.090293884 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:30.322518110 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:30.322925091 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:30.416002035 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:30.416142941 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:30.646765947 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:30.647013903 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:30.740349054 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:30.740711927 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:30.973368883 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:30.973862886 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:31.069076061 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:31.069186926 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:31.302035093 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:31.302210093 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:31.401036024 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:31.401129007 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:31.626194000 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:31.626300097 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:31.719423056 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:31.719557047 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:31.955008030 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:31.955230951 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:32.046664953 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:32.046926975 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:32.133460999 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:32.133651018 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:32.228539944 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:32.228848934 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:32.377598047 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:32.377734900 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:32.455792904 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:32.455975056 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:32.544406891 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:32.544590950 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:32.704716921 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:32.705082893 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:32.796339035 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:32.796936035 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:32.871388912 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:32.871670961 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:33.029262066 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:33.029376030 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:33.120599031 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:33.120898008 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:33.197346926 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:33.197700024 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:33.354345083 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:33.354443073 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:33.445312977 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:33.445539951 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:33.521342039 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:33.521538019 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:33.678040028 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:33.678132057 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:33.773904085 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:33.773998976 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:33.848228931 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:33.848414898 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:34.004712105 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:34.004873037 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:34.097598076 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:34.097717047 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:34.175434113 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:34.330478907 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:34.424758911 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:34.442512035 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:34.766550064 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:34.766695976 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:35.097266912 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:35.097393036 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:35.121562958 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:35.167465925 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:35.417850018 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:35.432284117 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:35.432451010 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:36.502286911 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:36.815006971 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:36.815481901 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:37.154031992 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:37.154274940 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:37.467597961 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:37.467858076 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:37.754968882 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:37.816756964 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:37.816973925 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:38.039762974 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:38.040045977 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:38.134433031 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:38.134466887 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:38.134555101 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:38.134598017 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:38.367650032 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:38.367974043 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:38.406131983 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:38.406253099 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:38.678057909 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:38.678620100 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:38.989389896 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:38.992948055 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:39.264905930 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:39.265075922 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:39.581711054 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:39.581897020 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:39.907455921 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:39.907757044 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:40.231818914 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:40.232054949 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:40.532813072 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:40.556201935 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:40.556303978 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:40.805450916 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:40.809421062 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:40.882358074 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:40.885401011 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:41.130434990 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:41.133022070 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:41.147478104 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:41.147588968 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:41.157082081 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:41.419203997 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:41.421422958 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:41.733859062 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:41.749489069 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:41.749564886 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:42.007184029 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:42.007343054 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:42.075541973 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:42.076059103 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:42.321140051 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:42.321386099 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:42.398216963 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:42.398402929 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:42.662188053 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:42.662425041 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:42.724569082 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:42.724720001 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:42.988588095 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:42.988742113 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:43.058329105 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:43.058496952 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:43.313586950 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:43.313966036 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:43.375993013 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:43.376426935 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:43.638453960 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:43.638875961 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:43.704268932 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:43.704432011 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:43.969703913 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:43.969957113 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:44.030540943 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:44.030828953 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:44.155558109 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:44.155853033 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:44.296653032 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:44.296765089 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:44.357361078 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:44.357528925 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:44.479440928 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:44.479646921 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:44.620018005 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:44.620142937 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:44.684189081 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:44.684278965 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:44.804658890 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:44.804904938 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:44.944399118 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:44.944540024 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:45.008567095 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:45.008660078 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:45.131568909 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:45.131709099 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:45.256589890 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:45.256732941 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:45.335838079 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:45.336245060 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:45.457633972 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:45.457865000 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:45.582978964 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:45.583106041 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:45.658483028 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:45.658691883 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:45.784722090 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:45.785342932 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:45.908178091 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:45.908611059 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:45.985143900 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:45.985316992 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:46.112179995 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:46.112395048 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:46.236759901 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:46.236845016 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:46.311387062 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:46.311557055 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:46.435769081 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:46.436037064 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:46.560435057 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:46.560899973 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:46.636240005 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:46.636769056 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:46.761101961 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:46.761399984 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:46.885191917 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:46.885351896 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:46.963737011 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:46.964030981 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:47.088035107 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:47.088287115 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:47.195225000 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:47.195446968 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:47.238272905 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:47.238430023 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:47.360088110 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:47.360469103 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:47.514000893 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:47.514098883 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:47.693161011 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:47.693399906 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:47.857151985 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:47.857553959 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:48.019090891 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:48.019778013 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:48.174621105 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:48.174896955 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:48.346024036 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:48.346254110 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:48.499897003 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:48.500076056 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:48.671118021 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:48.671497107 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:48.812716961 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:48.812943935 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:48.999582052 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:48.999733925 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:49.138406038 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:49.138571024 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:49.324632883 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:49.325259924 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:49.465754986 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:49.465923071 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:49.655342102 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:49.655878067 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:49.795780897 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:49.797451973 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:49.980349064 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:49.981365919 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:50.115369081 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:50.115492105 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:50.197263002 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:50.201307058 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:50.304285049 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:50.305440903 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:50.393120050 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:50.397398949 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:50.517112970 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:50.521286964 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:50.630916119 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:50.633491993 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:50.718568087 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:50.718663931 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:50.844059944 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:50.844295025 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:50.950448990 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:50.950795889 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:51.043407917 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:51.043611050 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:51.170660973 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:51.170839071 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:51.277695894 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:51.277918100 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:51.370017052 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:51.370117903 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:51.494528055 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:51.495083094 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:51.607626915 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:51.607991934 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:51.696654081 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:51.697191000 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:51.821460962 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:51.821557999 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:51.936405897 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:51.936559916 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:52.021440983 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:52.021601915 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:52.148394108 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:52.148968935 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:52.269912958 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:52.270157099 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:52.347346067 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:52.347613096 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:52.488722086 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:52.488935947 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:52.595891953 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:52.596066952 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:52.674000025 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:52.674189091 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:52.819338083 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:52.821342945 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:52.935184956 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:52.937362909 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:52.996767044 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:52.997287035 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:53.154875040 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:53.157221079 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:53.205177069 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:53.259577036 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:53.261348009 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:53.325709105 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:53.478276014 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:53.508524895 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:53.511266947 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:53.558010101 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:53.883739948 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:53.884177923 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:54.206949949 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:54.207294941 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:54.531825066 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:56.205456018 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:56.245631933 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:56.252710104 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:56.515326977 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:56.515455961 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:56.517441034 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:56.575939894 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:56.576468945 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:56.793840885 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:56.794212103 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:56.906696081 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:56.906794071 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:57.122008085 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:57.122246027 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:57.234327078 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:57.234455109 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:57.455010891 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:57.455183983 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:57.554941893 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:57.555110931 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:57.746841908 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:57.771210909 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:57.771383047 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:57.897234917 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:57.897402048 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:58.019185066 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:58.019768953 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:58.119220018 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:58.119385958 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:58.222110987 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:58.222279072 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:58.353697062 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:58.353919983 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:58.439131975 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:58.439383984 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:58.548321962 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:58.548424006 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:58.687169075 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:58.687356949 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:58.767564058 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:58.767730951 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:58.874434948 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:58.874682903 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:59.013541937 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:59.014108896 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:59.091532946 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:59.091705084 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:59.199485064 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:59.199620008 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:59.215524912 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:59.215612888 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:59.293958902 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:59.294044018 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:59.416354895 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:59.416451931 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:59.490772963 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:59.490856886 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:59.618201017 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:59.618360996 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:59.745347023 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:59.745568991 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:59.804214001 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:59.804375887 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:11:59.943790913 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:11:59.943901062 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:00.067209959 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:00.067441940 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:00.130072117 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:00.130182028 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:00.268336058 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:00.268610954 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:00.391555071 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:00.391854048 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:00.454535961 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:00.454822063 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:00.593414068 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:00.593626976 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:00.717372894 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:00.717679977 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:00.778315067 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:00.778572083 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:00.919373035 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:00.919590950 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:01.046451092 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:01.046607018 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:01.105456114 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:01.105576992 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:01.253961086 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:01.254079103 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:01.369813919 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:01.369990110 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:01.431488037 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:01.431647062 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:01.576742887 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:01.576920986 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:01.694801092 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:01.694968939 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:01.755496979 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:01.759507895 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:01.896759033 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:01.896929979 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:02.020416021 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:02.025304079 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:02.081662893 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:02.085182905 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:02.220840931 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:02.220921040 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:02.220947027 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:02.220988989 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:02.347315073 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:02.349301100 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:02.405498028 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:02.409285069 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:02.493551970 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:02.495883942 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:02.697323084 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:02.701399088 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:02.747983932 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:02.748137951 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:02.809366941 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:02.809454918 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:03.021815062 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:03.021991014 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:03.140647888 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:03.140768051 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:03.364409924 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:03.366810083 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:03.460530043 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:03.460598946 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:03.628524065 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:03.647785902 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:03.647891998 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:03.794207096 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:03.797406912 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:03.907480001 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:03.913284063 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:03.974622011 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:03.975574970 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:04.114944935 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:04.115400076 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:04.237493992 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:04.239507914 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:04.301696062 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:04.305224895 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:04.437643051 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:04.441237926 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:04.562881947 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:04.563219070 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:04.627578020 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:04.629703045 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:04.763680935 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:04.763796091 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:04.890932083 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:04.891089916 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:04.952132940 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:04.952275038 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:05.087764025 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:05.087836981 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:05.215214014 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:05.215411901 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:05.243057013 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:05.243125916 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:05.418313980 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:05.418662071 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:05.486790895 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:05.487044096 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:05.517807961 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:05.518044949 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:05.708198071 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:05.738743067 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:05.738898039 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:05.789815903 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:05.789984941 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:05.976284981 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:05.982022047 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:06.050579071 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:06.050762892 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:06.112133026 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:06.112282991 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:06.266715050 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:06.266885996 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:06.375936985 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:06.376084089 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:06.438364983 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:06.438520908 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:06.593174934 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:06.593322039 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:06.706487894 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:06.706569910 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:06.764169931 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:06.764236927 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:06.926409960 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:06.926567078 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:07.028181076 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:07.028280973 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:07.088047028 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:07.088160992 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:07.239710093 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:07.245635986 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:07.245731115 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:07.355108976 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:07.355242014 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:07.422581911 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:07.422673941 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:07.511385918 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:07.511560917 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:07.569140911 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:07.569246054 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:07.679236889 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:07.679399014 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:07.770560026 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:07.770792007 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:07.832350016 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:07.832492113 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:07.897043943 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:07.897193909 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:08.004266024 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:08.004466057 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:08.095215082 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:08.095361948 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:08.158380032 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:08.158493042 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:08.220156908 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:08.220222950 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:08.254462004 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:08.254530907 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:08.329253912 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:08.329333067 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:08.379111052 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:08.379173994 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:08.486011982 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:08.486107111 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:08.526452065 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:08.526650906 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:08.650362968 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:08.650507927 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:08.802602053 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:08.805335999 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:08.966146946 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:08.966238976 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:09.122442007 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:09.122662067 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:09.293509960 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:09.293756962 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:09.449994087 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:09.450117111 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:09.620946884 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:09.621342897 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:09.775300980 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:09.775660038 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:09.946746111 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:09.946875095 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:10.101119041 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:10.101207972 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:10.272922039 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:10.273173094 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:10.426470041 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:10.426798105 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:10.596338034 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:10.596581936 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:10.754486084 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:10.755561113 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:10.932856083 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:10.935487986 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:11.079581976 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:11.079734087 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:11.248684883 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:11.252187014 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:11.264698982 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:11.264760017 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:11.404558897 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:11.407666922 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:11.524710894 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:11.527502060 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:11.537180901 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:11.728013992 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:11.731358051 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:11.855355024 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:12.054867029 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:12.054948092 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:12.391066074 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:12.391216040 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:12.739913940 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:13.801489115 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:14.019650936 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:14.117629051 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:14.117837906 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:14.274053097 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:14.274230003 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:14.297836065 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:14.297858953 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:14.297920942 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:14.446619034 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:14.446702003 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:14.568921089 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:14.569104910 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:14.769454956 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:14.769680023 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:14.894819975 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:14.895144939 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:15.089183092 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:15.095287085 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:15.095392942 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:15.218879938 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:15.219209909 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:15.362674952 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:15.363014936 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:15.429505110 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:15.429661036 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:15.559777975 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:15.559925079 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:15.683713913 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:15.683866978 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:15.745883942 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:15.746038914 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:15.884998083 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:15.887739897 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:16.008827925 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:16.011380911 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:16.071037054 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:16.071321011 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:16.209708929 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:16.209827900 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:16.333065033 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:16.335674047 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:16.395445108 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:16.399673939 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:16.534555912 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:16.534882069 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:16.658787012 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:16.720750093 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:16.859729052 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:17.278959990 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:17.323903084 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:17.591583967 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:17.591670036 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:20.295908928 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:20.339600086 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:20.606621981 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:20.606700897 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:23.311074018 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:23.355277061 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:23.620338917 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:23.620398045 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:26.319463968 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:26.370754957 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:26.631836891 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:26.632033110 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:29.331252098 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:29.386591911 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:29.640748024 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:29.641014099 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:32.338201046 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:32.386718988 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:32.648483038 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:32.648653030 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:35.349553108 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:35.402237892 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:35.655575037 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:35.655970097 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:38.344763994 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:38.386795044 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:38.655514002 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:38.655705929 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:56.408505917 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:12:56.409193039 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:12:56.733783960 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:13:02.444317102 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:13:02.495975971 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:13:02.756434917 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:13:02.756802082 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:13:05.450366974 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:13:05.496164083 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:13:05.761539936 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:13:05.761976004 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:13:08.444042921 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:13:08.495932102 CEST	49730	1994	192.168.2.4	46.246.14.17
Apr 18, 2024 04:13:08.758018017 CEST	1994	49730	46.246.14.17	192.168.2.4
Apr 18, 2024 04:13:08.758076906 CEST	49730	1994	192.168.2.4	46.246.14.17

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 04:09:03.959031105 CEST	57679	53	192.168.2.4	1.1.1.1
Apr 18, 2024 04:09:04.098742008 CEST	53	57679	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 18, 2024 04:09:03.959031105 CEST	192.168.2.4	1.1.1.1	0x6674	Standard query (0)	rusia.duckdns.org	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 18, 2024 04:09:04.098742008 CEST	1.1.1.1	192.168.2.4	0x6674	No error (0)	rusia.duckdns.org		46.246.14.17	A (IP address)	IN (0x0001)	false

Target ID:	0
Start time:	04:08:55
Start date:	18/04/2024
Path:	C:\Users\user\Desktop\bUBL.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\bUBL.exe"
Imagebase:	0xc80000
File size:	32'768 bytes
MD5 hash:	C0BF09B4829BEF52BAC3D6FC6758CCD9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Njrat, Description: Yara detected Njrat, Source: 00000000.00000000.1652854625.0000000000C82000.00000002.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	13.5%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	2.4%
Total number of Nodes:	127
Total number of Limit Nodes:	5

Executed Functions

Function 05632273 Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 056322F3

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: 40e0f7fd2b5be84cc1f097f16e764f1f64d633d63b0bbbf9d19fcfd3021af08d
Instruction ID: 3315e7bac35355e9628b200dbfd218f213c0c92ce615a94493547d89926e8cf4
Opcode Fuzzy Hash: 40e0f7fd2b5be84cc1f097f16e764f1f64d633d63b0bbbf9d19fcfd3021af08d
Instruction Fuzzy Hash: A121D1755093809FEB228F25DC45B52BFF4FF06310F0884DAE9858F663D270A908CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 056322AA Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 056322F3

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: 6c323e9cd8c0933b8cd209c2009bb4aaf49b6a81043abfb47757b98dbe1774eb
Instruction ID: d905751600bd4251525f0f7c97003f79bbf617dfb8847a727e546d3f0b800151
Opcode Fuzzy Hash: 6c323e9cd8c0933b8cd209c2009bb4aaf49b6a81043abfb47757b98dbe1774eb
Instruction Fuzzy Hash: 6911A0755042009FEB20CF65DD45B66FBE4FF08320F08C46ADD468BA51D735E418CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0126A186 Relevance: 1.5, APIs: 1, Instructions: 42networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,?,?), ref: 0126A1C1

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: fc9c6d9e0d4cf58a6cf56cc8211ee7b54c2a364fe435b856a3b753dc20450bdb
Instruction ID: 78c8074b0b57b3bc7141b7affc31c85fe5e8f42a3761d4aa7b9f63cf7e1fe1a1
Opcode Fuzzy Hash: fc9c6d9e0d4cf58a6cf56cc8211ee7b54c2a364fe435b856a3b753dc20450bdb
Instruction Fuzzy Hash: D301B531504240DFDB20CF59D944B56FBE4EF44360F08C4AADD455BA52D375A458CFA2

Uniqueness

Uniqueness Score: -1.00%

Function 018303F8 Relevance: 1.6, APIs: 1, Instructions: 104
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserExceptionDispatcher.NTDLL ref: 0183041F

Memory Dump Source

Source File: 00000000.00000002.4123315094.0000000001830000.00000040.00000800.00020000.00000000.sdmp, Offset: 01830000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1830000_bUBL.jbxd

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: 6e193fa32b3966219ac91709fbdb153ce40251054d32d60395e8a34453b93724
Instruction ID: ead570d31fa97de3708648f004bee6ffefe422752716c762513b74710f4f607f
Opcode Fuzzy Hash: 6e193fa32b3966219ac91709fbdb153ce40251054d32d60395e8a34453b93724
Instruction Fuzzy Hash: 86315B71A012058FCB24DF78D58499EB7E6EF88304B588469E808EB399DB34DE45CBE1

Uniqueness

Uniqueness Score: -1.00%

Function 0126B5DE Relevance: 1.6, APIs: 1, Instructions: 103
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0126B69D

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: bbc7992dbbb0186cc04d43870ff9865a66c81e6301b8030c23b4f1e34b4b2fac
Instruction ID: 4be0d91becb46c28fd8430d91e6fc2b7f5b5452020c5be52b8bfcb6f2938e950
Opcode Fuzzy Hash: bbc7992dbbb0186cc04d43870ff9865a66c81e6301b8030c23b4f1e34b4b2fac
Instruction Fuzzy Hash: D531B5715053806FE722CF65DC44B62BFE8EF06314F08889AE984CB652D375A909D771

Uniqueness

Uniqueness Score: -1.00%

Function 018303E8 Relevance: 1.6, APIs: 1, Instructions: 102
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserExceptionDispatcher.NTDLL ref: 0183041F

Memory Dump Source

Source File: 00000000.00000002.4123315094.0000000001830000.00000040.00000800.00020000.00000000.sdmp, Offset: 01830000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1830000_bUBL.jbxd

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: 7359115b516620aa2abf9139aaf0769c89d803d4515eaf703cfe4697162a355c
Instruction ID: 6d68e0d927b481bcee070247738946b656b2d9a831d7664c4e6d2c0748d85925
Opcode Fuzzy Hash: 7359115b516620aa2abf9139aaf0769c89d803d4515eaf703cfe4697162a355c
Instruction Fuzzy Hash: 08415071A012058FCB14DF78D59459EBBF6AF88304B188469E809DB399DB34DE45CBE1

Uniqueness

Uniqueness Score: -1.00%

Function 05631D7E Relevance: 1.6, APIs: 1, Instructions: 99
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegCreateKeyExW.KERNELBASE(?,00000E24), ref: 05631E45

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: Create
String ID:
API String ID: 2289755597-0
Opcode ID: a10554ae43c6d7d25f61239d6d0268e7fc0572b14b3bf21882dcd2b6701e0bb0
Instruction ID: ea3b08e20ee01b83804fa35233318aaef86ecae15f35d551a6adf7f8d86a3130
Opcode Fuzzy Hash: a10554ae43c6d7d25f61239d6d0268e7fc0572b14b3bf21882dcd2b6701e0bb0
Instruction Fuzzy Hash: CE316172504344AFE721CB65CC45F67BBFCEF06610F04859AE985CB662D335E909CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0126BB4B Relevance: 1.6, APIs: 1, Instructions: 98
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,?,?), ref: 0126BC12

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: cb6a526a7ac94ed1793cb758a7197e0bfafc946b302fcdc7bfdb80e611dd60b1
Instruction ID: 768b97bb10891dbfd0f73488eb0c69327a170273b7910a104c07f30395a04767
Opcode Fuzzy Hash: cb6a526a7ac94ed1793cb758a7197e0bfafc946b302fcdc7bfdb80e611dd60b1
Instruction Fuzzy Hash: B3318B6510E3C06FD3138B258C61A61BFB4EF47610B0E45DBD8C48F6A3D229A909C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 0126A7C7 Relevance: 1.6, APIs: 1, Instructions: 95
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExW.KERNELBASE(?,00000E24), ref: 0126A879

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: Open
String ID:
API String ID: 71445658-0
Opcode ID: 84d3ff808da9570379f735c99ce8b8541cf5c7239a10ebf51c591ba70094171a
Instruction ID: 01120875aedd95ae68d10bf71871930212b6fcc530c78ce9ba1e00ed0dce75f4
Opcode Fuzzy Hash: 84d3ff808da9570379f735c99ce8b8541cf5c7239a10ebf51c591ba70094171a
Instruction Fuzzy Hash: 4331C7724083806FE7228B65DC44FA7BFBCEF16314F04849AE980CB693D224E90AC771

Uniqueness

Uniqueness Score: -1.00%

Function 0563099C Relevance: 1.6, APIs: 1, Instructions: 93
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getaddrinfo.WS2_32(?,00000E24), ref: 05630A63

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: getaddrinfo
String ID:
API String ID: 300660673-0
Opcode ID: 7620bd85dfc6f23846ebb6d51f49f100ad3eeece4749618fae3e8352df982f14
Instruction ID: 527be9e33fbe3cf76d1989482a2345af77e755f5620740085563fee486e41832
Opcode Fuzzy Hash: 7620bd85dfc6f23846ebb6d51f49f100ad3eeece4749618fae3e8352df982f14
Instruction Fuzzy Hash: 5431D1B1104300AFE721CB60DC44FA7FBACEF05324F04889AFA489B682D375A908CB70

Uniqueness

Uniqueness Score: -1.00%

Function 0126A612 Relevance: 1.6, APIs: 1, Instructions: 89
synchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateMutexW.KERNELBASE(?,?), ref: 0126A6B9

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: CreateMutex
String ID:
API String ID: 1964310414-0
Opcode ID: fa261c25f2c0bd5f93c16441be39cd16105a9a982029ebfdd7617e0494e2b48e
Instruction ID: e064d0169aff71bf74bc0d250e72ad165205ddbf3b26c4b5fff5549ec9e6c406
Opcode Fuzzy Hash: fa261c25f2c0bd5f93c16441be39cd16105a9a982029ebfdd7617e0494e2b48e
Instruction Fuzzy Hash: AE3193B15093805FE722CB25DC45B96BFF8EF06214F08889AE984CF693D375A909C761

Uniqueness

Uniqueness Score: -1.00%

Function 05630190 Relevance: 1.6, APIs: 1, Instructions: 89
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ConvertStringSecurityDescriptorToSecurityDescriptorW.ADVAPI32(?,00000E24), ref: 05630227

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: DescriptorSecurity$ConvertString
String ID:
API String ID: 3907675253-0
Opcode ID: 27e0166ff23b8bbbe288b5ecb9d2572ac66380de30ebcbdaf4857d745b072d51
Instruction ID: a1b35ee9a8570fc598c481611441e1079ba80a2f83d8e9aaf090eb61bdbcde46
Opcode Fuzzy Hash: 27e0166ff23b8bbbe288b5ecb9d2572ac66380de30ebcbdaf4857d745b072d51
Instruction Fuzzy Hash: C2319371504344AFEB21CB65DC45FA7BBF8EF05620F0888AAE944DBA52D324E909CB71

Uniqueness

Uniqueness Score: -1.00%

Function 05630894 Relevance: 1.6, APIs: 1, Instructions: 88
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcessTimes.KERNELBASE(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 05630931

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: ProcessTimes
String ID:
API String ID: 1995159646-0
Opcode ID: eb2be99b30801f5a2f0cefb693b2dac69e5e0105dcef444b714988e14c7f32bb
Instruction ID: e7abb9d3736b459abd6e84652735926a7c070c6b28eb4a7012ada3d2471127e7
Opcode Fuzzy Hash: eb2be99b30801f5a2f0cefb693b2dac69e5e0105dcef444b714988e14c7f32bb
Instruction Fuzzy Hash: 8B31D9725093805FE7228F64DD45F96BFB8EF06314F04849AE9448F593D3359909C771

Uniqueness

Uniqueness Score: -1.00%

Function 05631DAA Relevance: 1.6, APIs: 1, Instructions: 86
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegCreateKeyExW.KERNELBASE(?,00000E24), ref: 05631E45

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: Create
String ID:
API String ID: 2289755597-0
Opcode ID: 51584dc79bfd419a1548775fe24f727d040428e07380825fb4d10bd9775676b9
Instruction ID: 38f39568e9cd3183baa69d019d37ce1523d2ffa4b9f9b4d300cba51d6daddee4
Opcode Fuzzy Hash: 51584dc79bfd419a1548775fe24f727d040428e07380825fb4d10bd9775676b9
Instruction Fuzzy Hash: 13219C72500304AFEB31DF65CC45FA7BBECEF09614F04892AE945C6A51D735E909CAA1

Uniqueness

Uniqueness Score: -1.00%

Function 056309BE Relevance: 1.6, APIs: 1, Instructions: 84
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getaddrinfo.WS2_32(?,00000E24), ref: 05630A63

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: getaddrinfo
String ID:
API String ID: 300660673-0
Opcode ID: 2ba55bf972ae5904e378aaff05d8a6f657bc157810231f11700f34b30dc21639
Instruction ID: d93302cd0ac9d13b67c884252e64aab6827bd7fec527315fddfd8ccf0ff71848
Opcode Fuzzy Hash: 2ba55bf972ae5904e378aaff05d8a6f657bc157810231f11700f34b30dc21639
Instruction Fuzzy Hash: 6621B171101204AEFB30DB60DC45FA6F7ACEF14724F04886AEA489AA81D775E509CB71

Uniqueness

Uniqueness Score: -1.00%

Function 05630D10 Relevance: 1.6, APIs: 1, Instructions: 81COMMON

Download Yara Rule

APIs

GetVolumeInformationA.KERNELBASE(?,00000E24,?,?), ref: 05630DB6

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: d4f5706491c2c9f514dd33d00b07302cd6dfcf46c70c2c66f1ca25c27af4d2d5
Instruction ID: e382ee34e1cc5ab11af41867c2814780e04fa5f5ae340cfbfba54bef5154d44c
Opcode Fuzzy Hash: d4f5706491c2c9f514dd33d00b07302cd6dfcf46c70c2c66f1ca25c27af4d2d5
Instruction Fuzzy Hash: 3831C37150D3C06FD3128B258C51B62BFB8EF47210F0985DBE884CF693D225A949C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 0126A370 Relevance: 1.6, APIs: 1, Instructions: 80registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 0126A40C

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: b4cda5739bb14f92d4f48f8fd208d046dd967ad027bc64889d33cebc902f7a71
Instruction ID: d2ad2a08d71b9bd2fd13ecb1a9a299100a5a4b2b713dc44203ff83eea78943b7
Opcode Fuzzy Hash: b4cda5739bb14f92d4f48f8fd208d046dd967ad027bc64889d33cebc902f7a71
Instruction Fuzzy Hash: 3221BF71504340AFE721CF15CC84FA7BBFCEF05610F08849AEA45DB692D364E949CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0563201D Relevance: 1.6, APIs: 1, Instructions: 80COMMON

Download Yara Rule

APIs

select.WS2_32(?,?,?,?,?), ref: 056320AC

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: select
String ID:
API String ID: 1274211008-0
Opcode ID: df94837044716175059bf08bf5fc90c730a2061df1669b42f0ee2f89f054d669
Instruction ID: c196296d05992a2e536c4eda5518f471744e96162332a3a8e0d83ec0ec275080
Opcode Fuzzy Hash: df94837044716175059bf08bf5fc90c730a2061df1669b42f0ee2f89f054d669
Instruction Fuzzy Hash: 0B2171755093849FD722CF25DC44A52BFF8EF06310F0884DAE985CB662D375E949CB61

Uniqueness

Uniqueness Score: -1.00%

Function 056323F5 Relevance: 1.6, APIs: 1, Instructions: 79COMMON

Download Yara Rule

APIs

GetExitCodeProcess.KERNELBASE(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 0563247C

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: CodeExitProcess
String ID:
API String ID: 3861947596-0
Opcode ID: 548768357244d616832025d7fe3469778f64c46b7e02ad7c0f692f3b3522ed68
Instruction ID: 0d062578ea71859c658d7a4769f80d208302441eb012b326b61223c343e41964
Opcode Fuzzy Hash: 548768357244d616832025d7fe3469778f64c46b7e02ad7c0f692f3b3522ed68
Instruction Fuzzy Hash: 5721C4715093806FE712CB64DC45F96BFB8EF46314F0884EAE944CF693D268A909C771

Uniqueness

Uniqueness Score: -1.00%

Function 0126BC3E Relevance: 1.6, APIs: 1, Instructions: 77networkCOMMON

Download Yara Rule

APIs

WSASocketW.WS2_32(?,?,?,?,?), ref: 0126BCCA

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: Socket
String ID:
API String ID: 38366605-0
Opcode ID: b145e2803d4021d35dc3457a5e182031dff1d69153fb35e4132cf15b2ed41deb
Instruction ID: 29fbd70bb5c07f28397bf96bcead3789e249099aba061a7a03336e03c508e33f
Opcode Fuzzy Hash: b145e2803d4021d35dc3457a5e182031dff1d69153fb35e4132cf15b2ed41deb
Instruction Fuzzy Hash: 9B21A271509340AFD722CF55DC45F56FFB8EF09210F04889EE9858B692C375A509CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0126A462 Relevance: 1.6, APIs: 1, Instructions: 77registryCOMMON

Download Yara Rule

APIs

RegSetValueExW.KERNELBASE(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 0126A4F8

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: 8f13f43952ad8499fbe7f64594bdb3193b4e31a014e1607d1ba5fb303e08ef00
Instruction ID: 53e81e632c571dd6973b056e364087fa99d62e7e453bf9f19966a6d8dc4af180
Opcode Fuzzy Hash: 8f13f43952ad8499fbe7f64594bdb3193b4e31a014e1607d1ba5fb303e08ef00
Instruction Fuzzy Hash: BD21AE725083806FE7228F15DC44FA7BFBCEF46610F08849AE985DB692D364E949C771

Uniqueness

Uniqueness Score: -1.00%

Function 05630346 Relevance: 1.6, APIs: 1, Instructions: 77fileCOMMON

Download Yara Rule

APIs

MapViewOfFile.KERNELBASE ref: 056303DA

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: FileView
String ID:
API String ID: 3314676101-0
Opcode ID: 38185dfe57e63a2e0ab8b53f842dc739d24c9e01e360f32e1d1e580e65f726fc
Instruction ID: 02c1e371fc4678a54f5b7781c7ff1ae7bd6ca40ac2b7ffdbcdf323a45cba69fe
Opcode Fuzzy Hash: 38185dfe57e63a2e0ab8b53f842dc739d24c9e01e360f32e1d1e580e65f726fc
Instruction Fuzzy Hash: 2D21F171408380AFE722CF15DC45F96FFF8EF09224F0488AEE9848B652D375A909CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0126B61E Relevance: 1.6, APIs: 1, Instructions: 76fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0126B69D

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: f5f51b4bf9c251fefa27120cb73dc742e6f9a0d0d88982ed2957e5774a5f1d7c
Instruction ID: 5a12299e079776a296092b0de7d4bdf2a69b52da7293046fa8e687376665f0f8
Opcode Fuzzy Hash: f5f51b4bf9c251fefa27120cb73dc742e6f9a0d0d88982ed2957e5774a5f1d7c
Instruction Fuzzy Hash: D821B271604200AFE721CF69DD45F66FBE8EF08214F048869EA45CBA91D375E949CB71

Uniqueness

Uniqueness Score: -1.00%

Function 056320EC Relevance: 1.6, APIs: 1, Instructions: 76COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 05632172

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: f579d7a3b057e9a6b19771eea0701afeca7a6395032beb97da4e8e88ae3296e4
Instruction ID: 98281fd627c1de3522600488ed8d6a7c79d932e63d1af4ed3b06476b534a99a9
Opcode Fuzzy Hash: f579d7a3b057e9a6b19771eea0701afeca7a6395032beb97da4e8e88ae3296e4
Instruction Fuzzy Hash: 4221C4B65093805FD712CB25DC55B56BFB8AF46214F0884DAE988CF653E225D808C771

Uniqueness

Uniqueness Score: -1.00%

Function 056301B6 Relevance: 1.6, APIs: 1, Instructions: 76COMMON

Download Yara Rule

APIs

ConvertStringSecurityDescriptorToSecurityDescriptorW.ADVAPI32(?,00000E24), ref: 05630227

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: DescriptorSecurity$ConvertString
String ID:
API String ID: 3907675253-0
Opcode ID: 2962bd9680ae067256b151f56762a1c3991c2b701e4063851c708d572ff91cac
Instruction ID: 2661f39ff9f80b382e63b6013b5bdfc145df5ac2d4118f92323d4955fb548972
Opcode Fuzzy Hash: 2962bd9680ae067256b151f56762a1c3991c2b701e4063851c708d572ff91cac
Instruction Fuzzy Hash: 1521C272600204AFEB30DE65DD45FABBBECEF04624F04886AE944DBA51D774E509CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0126B6F4 Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 0126B789

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 83c6e3eb818b7c970081b66ee68a545464fa6269d96805be185ade3dcfef6cd0
Instruction ID: c83d9ba4d5e35fa16dbd97e4d6a084fb867962a35abec8483efaf98f1a8710e2
Opcode Fuzzy Hash: 83c6e3eb818b7c970081b66ee68a545464fa6269d96805be185ade3dcfef6cd0
Instruction Fuzzy Hash: C9212CB55087806FE7228B25DC44BA7BFBCDF46724F0884DAE9858B693D324A909C771

Uniqueness

Uniqueness Score: -1.00%

Function 056300AA Relevance: 1.6, APIs: 1, Instructions: 75registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 0563013C

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: d6b20bf0a476130a4df1490424a975865093be157cc74e1c20690125e935081d
Instruction ID: 691e6c02e6a55bfc00d6ce63c466a52de72775cd885c45d323b9d9a66effbd66
Opcode Fuzzy Hash: d6b20bf0a476130a4df1490424a975865093be157cc74e1c20690125e935081d
Instruction Fuzzy Hash: CE21BD72508344AFD722CF55CC49FA7FBF8EF05620F08889AE9458B692D324E909CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0126A7FA Relevance: 1.6, APIs: 1, Instructions: 74registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.KERNELBASE(?,00000E24), ref: 0126A879

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: Open
String ID:
API String ID: 71445658-0
Opcode ID: e6c4454ffbe207671223a1a253e1db3268da92660648bd7583f2a214ec0106d5
Instruction ID: 33a39902db4d77085d926b0b11509118cb22e06147552145e9c3d32432cce3f1
Opcode Fuzzy Hash: e6c4454ffbe207671223a1a253e1db3268da92660648bd7583f2a214ec0106d5
Instruction Fuzzy Hash: 1C210172400300AFE7318F55CC44FABFBECEF14214F04882AEA409BA92D774E9498AB1

Uniqueness

Uniqueness Score: -1.00%

Function 056325C3 Relevance: 1.6, APIs: 1, Instructions: 73COMMON

Download Yara Rule

APIs

SetProcessWorkingSetSize.KERNEL32(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 0563263F

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: 5f699d2aca958d8ac4896a1213ba9909182c6a8a829780b2a9877892bf6e12ee
Instruction ID: 5f416a3fb78d3ffa1928cc0a050d7c0f598bdeed1d554a1e5bffbad13975b635
Opcode Fuzzy Hash: 5f699d2aca958d8ac4896a1213ba9909182c6a8a829780b2a9877892bf6e12ee
Instruction Fuzzy Hash: F121C5715093806FD721CB65DC45FA7BFA8EF46214F08C4AAE944CB652D274A908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 056324DF Relevance: 1.6, APIs: 1, Instructions: 73COMMON

Download Yara Rule

APIs

GetProcessWorkingSetSize.KERNEL32(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 0563255B

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: 5f699d2aca958d8ac4896a1213ba9909182c6a8a829780b2a9877892bf6e12ee
Instruction ID: 18d4ea7da8be43ac971132d9c3689d40b30d07410b18ba501e2b6bb137109981
Opcode Fuzzy Hash: 5f699d2aca958d8ac4896a1213ba9909182c6a8a829780b2a9877892bf6e12ee
Instruction Fuzzy Hash: FB21C5715093806FD722CB65DC55FABBFA8EF45220F08C4AAE944CB652D274A908CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0126A646 Relevance: 1.6, APIs: 1, Instructions: 72synchronizationCOMMON

Download Yara Rule

APIs

CreateMutexW.KERNELBASE(?,?), ref: 0126A6B9

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: CreateMutex
String ID:
API String ID: 1964310414-0
Opcode ID: f22cc394dec874647d075998a512a40f5051b50e067e669477f14e3503151a16
Instruction ID: 825e5c63ddc700adb98735229a21456b554a66b5eb96ded7d6cc280e862204fa
Opcode Fuzzy Hash: f22cc394dec874647d075998a512a40f5051b50e067e669477f14e3503151a16
Instruction Fuzzy Hash: BC2104716002409FEB21CF29DD45BA6FBECEF04214F04C869EA45DB781D775E949CA71

Uniqueness

Uniqueness Score: -1.00%

Function 0126B9D6 Relevance: 1.6, APIs: 1, Instructions: 70fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 0126BA55

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: d9ad9813e2eeb80abe4ded48be0d78e47447cf1ef3cc369b7309a8e5d654dcc1
Instruction ID: b5ac3796d9ef31edf10fe25a3edb3e00b053ab9669c8063289365206be27ad18
Opcode Fuzzy Hash: d9ad9813e2eeb80abe4ded48be0d78e47447cf1ef3cc369b7309a8e5d654dcc1
Instruction Fuzzy Hash: D121A471505340AFD722CF55DC44F97BFB8EF45710F08889AE9449B552D234A909CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 0126A392 Relevance: 1.6, APIs: 1, Instructions: 69registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 0126A40C

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 4cf413c9fd0ebee5c2eda682cb72f61ebefddadac4852fde052cc7d265b5cb56
Instruction ID: 87e0b8d4c5c4df922b78455664a554221ca9cd6228363de9abe98ca9bd43c354
Opcode Fuzzy Hash: 4cf413c9fd0ebee5c2eda682cb72f61ebefddadac4852fde052cc7d265b5cb56
Instruction Fuzzy Hash: 7721AE716002009FE731CF19CD85FA6B7ECEF04610F04C46AEA45DB692D774E949CAB1

Uniqueness

Uniqueness Score: -1.00%

Function 0126A140 Relevance: 1.6, APIs: 1, Instructions: 69networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,?,?), ref: 0126A1C1

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: 893f75534a0bac622bc1c172eb40350629479b0c27d78ec08127e4a42207113c
Instruction ID: f5cbf3f7edd55a3eb9118ed596937e8643d2b3ef02193ac164ec6c12dcf6161d
Opcode Fuzzy Hash: 893f75534a0bac622bc1c172eb40350629479b0c27d78ec08127e4a42207113c
Instruction Fuzzy Hash: C421AC7140D3C09FD7238B61DC54A52BFB4EF07220F0A84DBD9848F5A3D279A949CB62

Uniqueness

Uniqueness Score: -1.00%

Function 05631F57 Relevance: 1.6, APIs: 1, Instructions: 69COMMON

Download Yara Rule

APIs

ioctlsocket.WS2_32(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 05631FD3

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: ioctlsocket
String ID:
API String ID: 3577187118-0
Opcode ID: b3652ac19a8fb464a82c66138794d559e73173ffd822791a0f82c3409868feba
Instruction ID: 77a94f498f92a1b28980539d04c3f7e272b3c00042bcd0f0ad22324948c7ab07
Opcode Fuzzy Hash: b3652ac19a8fb464a82c66138794d559e73173ffd822791a0f82c3409868feba
Instruction Fuzzy Hash: B321A1714093806FD722CF54DC49FAABFB8EF46214F0888AAE9449B652D374A908C7A1

Uniqueness

Uniqueness Score: -1.00%

Function 0126BC5E Relevance: 1.6, APIs: 1, Instructions: 67networkCOMMON

Download Yara Rule

APIs

WSASocketW.WS2_32(?,?,?,?,?), ref: 0126BCCA

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: Socket
String ID:
API String ID: 38366605-0
Opcode ID: 2876f18c04efb90652d7d886df04198c1ea7d25bc6d11f0c9ed8ddefa3a7865a
Instruction ID: 3ddad71f9e6e2ff1b42d6fbf8797e027737bbfe34b0e4c159d1ef0b36b6696ae
Opcode Fuzzy Hash: 2876f18c04efb90652d7d886df04198c1ea7d25bc6d11f0c9ed8ddefa3a7865a
Instruction Fuzzy Hash: C7212671504200AFE731CF55DD41F56FBE8EF08320F04886EE9458BA92C375A549CB72

Uniqueness

Uniqueness Score: -1.00%

Function 05630366 Relevance: 1.6, APIs: 1, Instructions: 67fileCOMMON

Download Yara Rule

APIs

MapViewOfFile.KERNELBASE ref: 056303DA

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: FileView
String ID:
API String ID: 3314676101-0
Opcode ID: 920c0e961551d59ebb63aa94394267efff80e262bc460ffb4b973093be108e3a
Instruction ID: c80082e9e96a98d431140943b5a46480ae84b478438e3e8f0103d2488c380095
Opcode Fuzzy Hash: 920c0e961551d59ebb63aa94394267efff80e262bc460ffb4b973093be108e3a
Instruction Fuzzy Hash: A421DE72500204AFE721CF19DD89FAAFBE8EF08224F048869E9458BA51D375E509CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 05630B6E Relevance: 1.6, APIs: 1, Instructions: 67networkCOMMON

Download Yara Rule

APIs

WSAConnect.WS2_32(?,?,?,?,?,?,?), ref: 05630BEA

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: Connect
String ID:
API String ID: 3144859779-0
Opcode ID: 8dbdfe6648a21fa09433d642468e689bdc3430039218ec4dff084701fbdafeeb
Instruction ID: 3e0937004b85fabd24b98f78211435431f30446f3b1c2cfca23a4e6ae1d83052
Opcode Fuzzy Hash: 8dbdfe6648a21fa09433d642468e689bdc3430039218ec4dff084701fbdafeeb
Instruction Fuzzy Hash: 38219271508380AFDB228F51DC44B62FFF4FF06310F0884DAE9858B662D335A818DB61

Uniqueness

Uniqueness Score: -1.00%

Function 0126A710 Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 0126A780

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: e62196cd0c324b80d3b799711cd82d5bea0cda372e5f145bd36d3574b0586f97
Instruction ID: e2fb7db946af0f8f6eb2c35bc6e0a6ffb35c1fa16c0a1b193481e5b20d275115
Opcode Fuzzy Hash: e62196cd0c324b80d3b799711cd82d5bea0cda372e5f145bd36d3574b0586f97
Instruction Fuzzy Hash: 4B21D2B55083809FD712CF15ED85B52BFB8EF02324F0984AAED458B693D335A909DBA1

Uniqueness

Uniqueness Score: -1.00%

Function 05630FD2 Relevance: 1.6, APIs: 1, Instructions: 66libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE(?,00000E24), ref: 0563105B

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 016e383e5fbd0cf721e76b763ee69a51bd4a08166886a160b916025baa081ab7
Instruction ID: f0a0aef2282aef4cca7d41771096f654a408df4170fff41179ebcb90c2ced632
Opcode Fuzzy Hash: 016e383e5fbd0cf721e76b763ee69a51bd4a08166886a160b916025baa081ab7
Instruction Fuzzy Hash: 841106714093806FE721CB11DC85FA6FFB8DF46720F04849AF9449F692C375A948CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0126A486 Relevance: 1.6, APIs: 1, Instructions: 65registryCOMMON

Download Yara Rule

APIs

RegSetValueExW.KERNELBASE(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 0126A4F8

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: 57aaf70c8c8a35997344f182805d5858fc5b89f747b5be5786ec5de1f307ee9a
Instruction ID: 3304523f787c9d45b9eab1fc032195b1e1697a8caea28f8011cee79ce22b171f
Opcode Fuzzy Hash: 57aaf70c8c8a35997344f182805d5858fc5b89f747b5be5786ec5de1f307ee9a
Instruction Fuzzy Hash: 5B11B172500300AFE731CE19DD45FA7BBECEF04714F04846AEE459BA91D774E9488AB1

Uniqueness

Uniqueness Score: -1.00%

Function 056300CA Relevance: 1.6, APIs: 1, Instructions: 65registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 0563013C

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 2d27d87b9628f80f17b82976acb432b2e6ac1ae25da1334d94bf69e00b6cac5a
Instruction ID: 5145febd2df553a4ddd4b435424bd2558b1b1023cc1d7960a76a3837c8bc6cad
Opcode Fuzzy Hash: 2d27d87b9628f80f17b82976acb432b2e6ac1ae25da1334d94bf69e00b6cac5a
Instruction Fuzzy Hash: 5E11AF72500604AFE731CE55CD89FA7F7E8EF04624F04C46AE9458AB51D774E909CAB1

Uniqueness

Uniqueness Score: -1.00%

Function 056308D2 Relevance: 1.6, APIs: 1, Instructions: 64timeCOMMON

Download Yara Rule

APIs

GetProcessTimes.KERNELBASE(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 05630931

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: ProcessTimes
String ID:
API String ID: 1995159646-0
Opcode ID: db923ace453c07b49b9292dc219e6cd5b047b7eff2c987116a2bcb6ac514785a
Instruction ID: 0372ce563dd7089ced4218bbdc1916e640bebc112248d82b44d513c2041a2f5d
Opcode Fuzzy Hash: db923ace453c07b49b9292dc219e6cd5b047b7eff2c987116a2bcb6ac514785a
Instruction Fuzzy Hash: D211D372500200AFEB21CF55DD49FAAB7E8EF04724F04C86AE9458AA91D774A909CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 05632502 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

GetProcessWorkingSetSize.KERNEL32(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 0563255B

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: 9c8beaa566f0a13c77b2d55d9f2797c14d66c7ba5d9ff29b769bd88d9e08a0b2
Instruction ID: c366c5c02d1c6ae4e66757f20eb47c64c21cd292602126c175220f888f0c7d19
Opcode Fuzzy Hash: 9c8beaa566f0a13c77b2d55d9f2797c14d66c7ba5d9ff29b769bd88d9e08a0b2
Instruction Fuzzy Hash: 2D1104755002009FEB21CF58DD45FAAB7A8EF44324F04C86AE905CBA41D774A909CAB1

Uniqueness

Uniqueness Score: -1.00%

Function 056325E6 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

SetProcessWorkingSetSize.KERNEL32(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 0563263F

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: 9c8beaa566f0a13c77b2d55d9f2797c14d66c7ba5d9ff29b769bd88d9e08a0b2
Instruction ID: 9690e859f278be337c96beb6a663e35af3015da208a38d592e686979e083ce0c
Opcode Fuzzy Hash: 9c8beaa566f0a13c77b2d55d9f2797c14d66c7ba5d9ff29b769bd88d9e08a0b2
Instruction Fuzzy Hash: 291104755002009FEB20CF54DD45FAAB7A8EF05324F04C87AE904CBA41D774A949CAB1

Uniqueness

Uniqueness Score: -1.00%

Function 0126AC03 Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 0126AC6E

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: f44c7e939319e54c4ef8cc93f87af1ebbf99341ec60fad0e004694d789e2d993
Instruction ID: 233aa72b47a8dc7b2489b2166278ca799c18d6f833ac4248be0b83377f4b1c84
Opcode Fuzzy Hash: f44c7e939319e54c4ef8cc93f87af1ebbf99341ec60fad0e004694d789e2d993
Instruction Fuzzy Hash: BD118471409380AFDB228F55DC44A62FFF8EF4A310F0888DEEE858B563D275A519DB61

Uniqueness

Uniqueness Score: -1.00%

Function 05632426 Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

GetExitCodeProcess.KERNELBASE(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 0563247C

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: CodeExitProcess
String ID:
API String ID: 3861947596-0
Opcode ID: 82d9dffdc6c9eedb5d1fd303c00732d8fbb8115797d3edaa2faf4bd8263d47e0
Instruction ID: cc0060dac8c2570ea97a9c73f84ff5b5b3e5ccaeb2579076bb1df1364d0150e6
Opcode Fuzzy Hash: 82d9dffdc6c9eedb5d1fd303c00732d8fbb8115797d3edaa2faf4bd8263d47e0
Instruction Fuzzy Hash: 6B11E775500200AFE720CF59DD45BAAB798EF44724F04C46AED44CBB41D778A909CAB1

Uniqueness

Uniqueness Score: -1.00%

Function 05630007 Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

GetComputerNameW.KERNEL32(?,00000E24,?,?), ref: 05630082

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: ComputerName
String ID:
API String ID: 3545744682-0
Opcode ID: 957f5d36eed0ebd5ecee032b42abccdd0c55bda30bb2365ef0d38f32e92e662d
Instruction ID: 523b19af14de1d5fbf0b8e98d620fe9506106314b014aea5eb13503fc7d4d800
Opcode Fuzzy Hash: 957f5d36eed0ebd5ecee032b42abccdd0c55bda30bb2365ef0d38f32e92e662d
Instruction Fuzzy Hash: 1F1127715053406FC3118B15DC41F72BFF8EF86620F05819AEC488BA42D234B915CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 0126B9F6 Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 0126BA55

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 8f79ebbee5e55524139d5a9bcfa558480578e328b2e0fe5623fea89f9ed24585
Instruction ID: 4b1d5e97b05d0fcb92f04cb6c92a81a5f3ce9a95184c02400aa8d0585587ad47
Opcode Fuzzy Hash: 8f79ebbee5e55524139d5a9bcfa558480578e328b2e0fe5623fea89f9ed24585
Instruction Fuzzy Hash: F311E271500300AFEB31CF54DD45FAAFBE8EF08714F04886AE9448AA91C374A9488BB1

Uniqueness

Uniqueness Score: -1.00%

Function 05631F7A Relevance: 1.6, APIs: 1, Instructions: 58COMMON

Download Yara Rule

APIs

ioctlsocket.WS2_32(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 05631FD3

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: ioctlsocket
String ID:
API String ID: 3577187118-0
Opcode ID: bd6c4f8bda3e009ea79d947d9c3d9aafe7800a228fb75ea3c5d3e064e495f00e
Instruction ID: 70a1081b5d60807093809415555e5ebbc0f13143643914c018abdf2889136f30
Opcode Fuzzy Hash: bd6c4f8bda3e009ea79d947d9c3d9aafe7800a228fb75ea3c5d3e064e495f00e
Instruction Fuzzy Hash: 6411E071500200AFEB31DF54DD45FAAFBE8EF44724F04C8AAE9058BB41D778A509CAB1

Uniqueness

Uniqueness Score: -1.00%

Function 0126A2AE Relevance: 1.6, APIs: 1, Instructions: 56COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0126A30C

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 5a8a0aa0666ad1e7cbdad49d05ced686caf52688b10edc5580e41e0c6eed185e
Instruction ID: 9bd12bb69671cbfe66a6a5aef7a6c1b35509c9ffa8d2564cd210afa23ebed05d
Opcode Fuzzy Hash: 5a8a0aa0666ad1e7cbdad49d05ced686caf52688b10edc5580e41e0c6eed185e
Instruction Fuzzy Hash: D611BF704093C06FDB238B25DC44A62BFB8DF47224F0880CBED848F6A3D2656918C772

Uniqueness

Uniqueness Score: -1.00%

Function 05630FF2 Relevance: 1.6, APIs: 1, Instructions: 56libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE(?,00000E24), ref: 0563105B

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: c80589a41e40864eef4ff9347a09ebcfd2a9bf7275811b52966100a44dd8a7ac
Instruction ID: f03837465a7a93d9f3c5b4bd039a975a045e8e992970bfc35d70e30d8473b01c
Opcode Fuzzy Hash: c80589a41e40864eef4ff9347a09ebcfd2a9bf7275811b52966100a44dd8a7ac
Instruction Fuzzy Hash: 33112131504240AFE730DB15DD82FB6FBA8DF05724F04C4AAEE045AB81C7B9A949CAA1

Uniqueness

Uniqueness Score: -1.00%

Function 05632056 Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

select.WS2_32(?,?,?,?,?), ref: 056320AC

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: select
String ID:
API String ID: 1274211008-0
Opcode ID: adde22ee5f66410c0dc0bc12269ce01e7ce86087a9b4c3fdc1fda99d430db1bb
Instruction ID: 02b2601b84abd90c697826c76eb99fd7bfddf4c04df9e35448006906740bb3c3
Opcode Fuzzy Hash: adde22ee5f66410c0dc0bc12269ce01e7ce86087a9b4c3fdc1fda99d430db1bb
Instruction Fuzzy Hash: BC116D756042048FDB20CF65D985F66FBE8EF04610F0888AADD4ACBA51D334E548CB72

Uniqueness

Uniqueness Score: -1.00%

Function 0563212A Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 05632172

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 2d374e014d44b32931b71395aab9efced583305df23afc1560e840a38ddbf794
Instruction ID: ecb4fe99832677716cfd8d087e32e4af2a4b23e2586ad6340912adbe38e785b7
Opcode Fuzzy Hash: 2d374e014d44b32931b71395aab9efced583305df23afc1560e840a38ddbf794
Instruction Fuzzy Hash: B71165756042409FDB20CF29DD95B6AFBE8EF44620F08C46ADE45CBB51D774D404CA61

Uniqueness

Uniqueness Score: -1.00%

Function 0126B736 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E24,40227035,00000000,00000000,00000000,00000000), ref: 0126B789

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 4ae09750ebca31aeb5162d6657f35f8024e2c1d8b0af9dac893d78f1482afc4b
Instruction ID: f8f59915b1b6793434fb79890cb00359acf5633a5f2ebc90e079cb215d31a905
Opcode Fuzzy Hash: 4ae09750ebca31aeb5162d6657f35f8024e2c1d8b0af9dac893d78f1482afc4b
Instruction Fuzzy Hash: 6501C472504200AEE721DF19DD85BA6F7ACDF44624F08C466EE048B781D778A9498AA5

Uniqueness

Uniqueness Score: -1.00%

Function 0126AD9F Relevance: 1.6, APIs: 1, Instructions: 52comCOMMON

Download Yara Rule

APIs

OleInitialize.OLE32(?), ref: 0126AE00

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 54b9611f5a5e6f1f03d05a5101785e7f8ba3e4c9d571f4c26110c79dacf31c94
Instruction ID: 2429543487305101721f29bc621a75bfe7ee74bf788ee28f80e90c0de769aab3
Opcode Fuzzy Hash: 54b9611f5a5e6f1f03d05a5101785e7f8ba3e4c9d571f4c26110c79dacf31c94
Instruction Fuzzy Hash: C31102704083809FDB12CF15DC88B52BFB4EF46320F0884EAED449F293D275A908CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 05630B9E Relevance: 1.5, APIs: 1, Instructions: 49networkCOMMON

Download Yara Rule

APIs

WSAConnect.WS2_32(?,?,?,?,?,?,?), ref: 05630BEA

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: Connect
String ID:
API String ID: 3144859779-0
Opcode ID: b0f91b8f991ba2cf02cccf09267b15c87b71aef5a33c10ae6be18d9906716a54
Instruction ID: 59cb5ab8868224c5af9def0a2630d243940eb466a78d9e45383353c2bacfd052
Opcode Fuzzy Hash: b0f91b8f991ba2cf02cccf09267b15c87b71aef5a33c10ae6be18d9906716a54
Instruction Fuzzy Hash: 681182715046049FDB20CF55D949B66FBE5FF08320F08C8AADD458BA61D335E418CF61

Uniqueness

Uniqueness Score: -1.00%

Function 05630D66 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetVolumeInformationA.KERNELBASE(?,00000E24,?,?), ref: 05630DB6

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: ee067da23dfd1e69b901fa93c1596c0d6b2816cdd73c58d1e05065858326e266
Instruction ID: 29c38733382f7b454f494fa160c5a647a10dffd2e42c35e97fb7352d040f528b
Opcode Fuzzy Hash: ee067da23dfd1e69b901fa93c1596c0d6b2816cdd73c58d1e05065858326e266
Instruction Fuzzy Hash: 63017171600200ABD310DF16DD46B66FBE8EB88B20F14856AED089BB41D735F955CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 0126AC2A Relevance: 1.5, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 0126AC6E

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 705f2240e0c5cd47263d6751fa2e18257f57e2d2a07e8ec54b82dbac9838e14d
Instruction ID: 4598bc600bd73717e27ac751e5d236cfda5c1fb5d2933fba5edbd36107523cfd
Opcode Fuzzy Hash: 705f2240e0c5cd47263d6751fa2e18257f57e2d2a07e8ec54b82dbac9838e14d
Instruction Fuzzy Hash: 1801A1315102009FDB218F55D944B62FBE4EF48310F08C86ADE454BA56C375E458DF61

Uniqueness

Uniqueness Score: -1.00%

Function 0126BBC2 Relevance: 1.5, APIs: 1, Instructions: 43registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,?,?), ref: 0126BC12

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: e5a5d8f7f66b6e4fc11996ee5d151ce060afb1d30878c002c21aa0b6b5f2f88f
Instruction ID: 04dbc61b534c496584e2ddec3e9342bcff5197c64b7f5f4efe7936ad844fc668
Opcode Fuzzy Hash: e5a5d8f7f66b6e4fc11996ee5d151ce060afb1d30878c002c21aa0b6b5f2f88f
Instruction Fuzzy Hash: C501A271500200ABD210DF1ADD46B66FBE8FB88B20F14811AEC089BB81D771F956CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 0126A74E Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 0126A780

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: 46e696f2416634404ce6519bc006f8914da022d6388de1a69b7ffabd350aad52
Instruction ID: d0931a266ac1bb78ce6742b205dbb3f5ca93590c9956edc03621f939bfad9c61
Opcode Fuzzy Hash: 46e696f2416634404ce6519bc006f8914da022d6388de1a69b7ffabd350aad52
Instruction Fuzzy Hash: 6A01D4715042008FEB218F29D98576AFBE8DF04220F08C4ABDD469FB92D678E448CAA1

Uniqueness

Uniqueness Score: -1.00%

Function 05630032 Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

GetComputerNameW.KERNEL32(?,00000E24,?,?), ref: 05630082

Memory Dump Source

Source File: 00000000.00000002.4149393540.0000000005630000.00000040.00000800.00020000.00000000.sdmp, Offset: 05630000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5630000_bUBL.jbxd

Similarity

API ID: ComputerName
String ID:
API String ID: 3545744682-0
Opcode ID: 6f41f3badd621599875914e9dd0474ec2dcf744212c3c7e2bf9c64c097967db1
Instruction ID: 6c678d8a16bac9c82785e60c248a0a11a734a8d86ef284085e0a86ba9d37d6e0
Opcode Fuzzy Hash: 6f41f3badd621599875914e9dd0474ec2dcf744212c3c7e2bf9c64c097967db1
Instruction Fuzzy Hash: 0101D671500200ABD310DF1ADD46B66FBE8FB88B20F148159EC089BB41D731F956CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 0126ADCE Relevance: 1.5, APIs: 1, Instructions: 39comCOMMON

Download Yara Rule

APIs

OleInitialize.OLE32(?), ref: 0126AE00

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 62d8351720e080a632c83113b7c709d6e9239b764809975664e8527207e8d3c8
Instruction ID: 3dc297a3f03174a10219704887e8aa4ee3996d5d10ff49c72aa7f2bd79c63dc0
Opcode Fuzzy Hash: 62d8351720e080a632c83113b7c709d6e9239b764809975664e8527207e8d3c8
Instruction Fuzzy Hash: 7401D6719142408FDB20CF19D985766FBE4DF44320F08C4BADD499F796D379A548CAA1

Uniqueness

Uniqueness Score: -1.00%

Function 0126A2DA Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0126A30C

Memory Dump Source

Source File: 00000000.00000002.4121442725.000000000126A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_126a000_bUBL.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 8536c0faf8e12ab534a7c1716990b773d5149827af4e06b03e788f8e06a306ed
Instruction ID: 75bafdd951c5e38fe0d0de551a615a438b72f6b5581acec087eaf8c648e592ec
Opcode Fuzzy Hash: 8536c0faf8e12ab534a7c1716990b773d5149827af4e06b03e788f8e06a306ed
Instruction Fuzzy Hash: D9F0A4359142408FDB208F19D985766FBE4DF44724F08C0AADD055F792D3B9A458CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 05A31C60 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4149735645.0000000005A30000.00000040.00000800.00020000.00000000.sdmp, Offset: 05A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5a30000_bUBL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e856c20b70abf8203edfd8682a15d77a9afb38773177c49f20c7b885847caeb
Instruction ID: f988639933efec5dffaa6926ca2a24e54365c74f8d49c73ed589a8bd6805be01
Opcode Fuzzy Hash: 4e856c20b70abf8203edfd8682a15d77a9afb38773177c49f20c7b885847caeb
Instruction Fuzzy Hash: B711BAB5908341AFD350CF19D840A5BFBE4FB88664F04896EF998D7311D235E9188FA2

Uniqueness

Uniqueness Score: -1.00%

Function 018407C4 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4123387894.0000000001840000.00000040.00000020.00020000.00000000.sdmp, Offset: 01840000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1840000_bUBL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6fe96274ded74742ff26cf67726c1bede084cb22dea83df5d484ffc8d8f3e51
Instruction ID: 944485071a642a109815b215be213665cb27a0e475c42aa354e3fc34328e4de2
Opcode Fuzzy Hash: c6fe96274ded74742ff26cf67726c1bede084cb22dea83df5d484ffc8d8f3e51
Instruction Fuzzy Hash: 8911E730204288DFE315CB14DA40B56BBA5AB8870CF24C9ACF6495BB53CB7BD903CA91

Uniqueness

Uniqueness Score: -1.00%

Function 01840794 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4123387894.0000000001840000.00000040.00000020.00020000.00000000.sdmp, Offset: 01840000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1840000_bUBL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5f6c092eb7e9d2855192e2d0588026e7ed6a12f78317ffb62002a9a095a2a9d9
Instruction ID: eae1a79c4287a98a859b9b7c46e103394037e4b7f7d9f74574d5252005d35a4c
Opcode Fuzzy Hash: 5f6c092eb7e9d2855192e2d0588026e7ed6a12f78317ffb62002a9a095a2a9d9
Instruction Fuzzy Hash: EA219D311093C08FD713CB20C980B51BFB1AF47318F1986EED4888B6A3C73A8806CB51

Uniqueness

Uniqueness Score: -1.00%

Function 05A31B04 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4149735645.0000000005A30000.00000040.00000800.00020000.00000000.sdmp, Offset: 05A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5a30000_bUBL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d21828b44380888b768d8402be191386e7952b2f8da2a8764d2badb288f089ad
Instruction ID: 71366241f2a0e4e126f049da9584208dc5e75cc97e49f66707f97c9004a7c3b6
Opcode Fuzzy Hash: d21828b44380888b768d8402be191386e7952b2f8da2a8764d2badb288f089ad
Instruction Fuzzy Hash: F511FAB5908301AFD350CF19DC84E5BFBE8EB88660F04892EF95897711D231E9088FA2

Uniqueness

Uniqueness Score: -1.00%

Function 0127ADEC Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4121621580.000000000127A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0127A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_127a000_bUBL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b3466f486fd3e6134868a53b3f1847f545e4775df96b954867217bb3d1225b0a
Instruction ID: 69f41b8616aa34566a8e638b2c56e455f24b063ead7c5a7de5271869637d1e79
Opcode Fuzzy Hash: b3466f486fd3e6134868a53b3f1847f545e4775df96b954867217bb3d1225b0a
Instruction Fuzzy Hash: CE11FAB5A08301AFD350CF19DC44E5BFBE8EB88660F04892EF95897711D231E9088FA2

Uniqueness

Uniqueness Score: -1.00%

Function 018405E1 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4123387894.0000000001840000.00000040.00000020.00020000.00000000.sdmp, Offset: 01840000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1840000_bUBL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26050a85dcb50826bdc8ae5aa8d30f3c616bcb8b23c370bd418ee126abc113cc
Instruction ID: bee22f491e972b7c99185ee7790a04cd7d8e26852a7d12a4ec6b27fa685e8c32
Opcode Fuzzy Hash: 26050a85dcb50826bdc8ae5aa8d30f3c616bcb8b23c370bd418ee126abc113cc
Instruction Fuzzy Hash: CA0186B65093805FD7118F16AC45862FFF8EF8662070984AFEC498B652D225B908CBB2

Uniqueness

Uniqueness Score: -1.00%

Function 01840774 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4123387894.0000000001840000.00000040.00000020.00020000.00000000.sdmp, Offset: 01840000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1840000_bUBL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12303f7ad083bedbd4483b582bfd27c0b6e8b8475eeb2a1d2e21340b6fe36619
Instruction ID: 3f6641c9330e70fcdff9041746bcb11e8c10ecf30a1bb34a9f1e3392b51b7a28
Opcode Fuzzy Hash: 12303f7ad083bedbd4483b582bfd27c0b6e8b8475eeb2a1d2e21340b6fe36619
Instruction Fuzzy Hash: EE01613414D2C4DFC303CB20C950B55BFA1FB4A718F2986DAE5848B6A3C73A9906CB52

Uniqueness

Uniqueness Score: -1.00%

Function 01840880 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4123387894.0000000001840000.00000040.00000020.00020000.00000000.sdmp, Offset: 01840000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1840000_bUBL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 74b9f174851936b42c91253ba0377f3a0e724fe011995a5d7daf0febe73ee2ff
Instruction ID: 3543369f40be56af76643ffa6e180f88a77b4ce2e475f6a0a466d564a2531e36
Opcode Fuzzy Hash: 74b9f174851936b42c91253ba0377f3a0e724fe011995a5d7daf0febe73ee2ff
Instruction Fuzzy Hash: A8F01D35104644DFC306CF04D940B56FBA2FB89718F24CAADE94917B62C737D913DA81

Uniqueness

Uniqueness Score: -1.00%

Function 01840606 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4123387894.0000000001840000.00000040.00000020.00020000.00000000.sdmp, Offset: 01840000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1840000_bUBL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 84123b1ad0fe337ba36b005c1e6c482d62c78e1ba962696c64a1b3771aded0ba
Instruction ID: e170b87e276812a266cc4cdf9ac71847c28f3a61c9a069257cf09a3cbfd3abf9
Opcode Fuzzy Hash: 84123b1ad0fe337ba36b005c1e6c482d62c78e1ba962696c64a1b3771aded0ba
Instruction Fuzzy Hash: 24E092B66046004B9650CF0AFC45452F7D8EB88630708C47FDC0D8B711E235B908CAE5

Uniqueness

Uniqueness Score: -1.00%

Function 05A31CCB Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4149735645.0000000005A30000.00000040.00000800.00020000.00000000.sdmp, Offset: 05A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5a30000_bUBL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 64e794dc56c329deb7b6d4a7ac4b969362f8ead1829050b99ac18a9c2bbbd4ce
Instruction ID: 50538fc8b210d932c398cc4b99dda01742972da8a029b01eee13b46b0336ba6d
Opcode Fuzzy Hash: 64e794dc56c329deb7b6d4a7ac4b969362f8ead1829050b99ac18a9c2bbbd4ce
Instruction Fuzzy Hash: 9FE0D8B254020067D2208E06AC45F53FB9CDB94A31F04C46BED081B741E171B51889E1

Uniqueness

Uniqueness Score: -1.00%

Function 05A31577 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4149735645.0000000005A30000.00000040.00000800.00020000.00000000.sdmp, Offset: 05A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5a30000_bUBL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd6a9b8d395bd794abe18c5366702edc224d6cf0262e9698247d350e58967117
Instruction ID: 6796a12012addf7f6aaefe61f91733ff84893826119eb9ee28d71b75998922bc
Opcode Fuzzy Hash: bd6a9b8d395bd794abe18c5366702edc224d6cf0262e9698247d350e58967117
Instruction Fuzzy Hash: D4E0D8B254020067D2209E06AC4AF53FB98DB80A30F04C46BED085B751E172B514C9E1

Uniqueness

Uniqueness Score: -1.00%

Function 05A31B53 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4149735645.0000000005A30000.00000040.00000800.00020000.00000000.sdmp, Offset: 05A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5a30000_bUBL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 507c0b45646e2739684cdf147d09da8039bbc8e9d48b85530ec7f68532f1514e
Instruction ID: 5ed2793b08a70de4bb074e8ede6470d0b1b8065b154dc52f3e6593a153291e2b
Opcode Fuzzy Hash: 507c0b45646e2739684cdf147d09da8039bbc8e9d48b85530ec7f68532f1514e
Instruction Fuzzy Hash: 3CE0D8B254020467D2609E06AC45F53FB98DB40A31F04C56BED081B752E172B51489F1

Uniqueness

Uniqueness Score: -1.00%

Function 0127AE3B Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4121621580.000000000127A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0127A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_127a000_bUBL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e59c9d0113efce25f58f4d12dfdbfb851e0fe451847f3d5313959b53167f6e17
Instruction ID: 0a671927d1505fd62cda228430bdba07e1aadbfe001bb0894af7a430b348ff6c
Opcode Fuzzy Hash: e59c9d0113efce25f58f4d12dfdbfb851e0fe451847f3d5313959b53167f6e17
Instruction Fuzzy Hash: 47E020B254020467D2208F06EC45F63F79CDB54A31F04C56BED085F752E171B514C9F1

Uniqueness

Uniqueness Score: -1.00%

Function 012623F4 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4121342575.0000000001262000.00000040.00000800.00020000.00000000.sdmp, Offset: 01262000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1262000_bUBL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c663a5e6ed2a87fff9436ac26b1335b7ef50677641675d663d63b9c733e1ed85
Instruction ID: 9a75ec5b3664ef3e8e07e590bbfebc3aa4e62ccc5d320625a9312d4ee643a3e8
Opcode Fuzzy Hash: c663a5e6ed2a87fff9436ac26b1335b7ef50677641675d663d63b9c733e1ed85
Instruction Fuzzy Hash: 78D02B752006D18FE3128A0CC258B953BE8AF41704F0604F99800CB7A3C728D5C0C100

Uniqueness

Uniqueness Score: -1.00%

Function 012623BC Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4121342575.0000000001262000.00000040.00000800.00020000.00000000.sdmp, Offset: 01262000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1262000_bUBL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59a898a26f15a278d7620a4eb2222bf191badad4d7cfad15a8359d721b65b24f
Instruction ID: 5c7e441a8aa9466eb22fc3e0f9ed03b4e244c055307fc95810cac2a98bfcde6f
Opcode Fuzzy Hash: 59a898a26f15a278d7620a4eb2222bf191badad4d7cfad15a8359d721b65b24f
Instruction Fuzzy Hash: 21D05E342002828BD725DB0CC2D4F597BD8AB40714F0648E9BD108B7A2C7B4D8D0DA40

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 018319F0 Relevance: 3.9, Strings: 2, Instructions: 1396COMMON

Download Yara Rule

Strings

, xrefs: 018326A6
, xrefs: 0183269C

Memory Dump Source

Source File: 00000000.00000002.4123315094.0000000001830000.00000040.00000800.00020000.00000000.sdmp, Offset: 01830000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1830000_bUBL.jbxd

Similarity

API ID:
String ID: $
API String ID: 0-227171996
Opcode ID: a6622eca3bb45a7839bfa4c3ecc747d294f120411df615464bba4238d7aaca6a
Instruction ID: 37b0ee65464aa5d4960be7a016a2d9fbd1b4f0df827b3af158e98733d6cbfe66
Opcode Fuzzy Hash: a6622eca3bb45a7839bfa4c3ecc747d294f120411df615464bba4238d7aaca6a
Instruction Fuzzy Hash: 3CC29E34B00215CFCB24DB78C954BAEB7E7AF88304F1580A9D5099B7A1DF789E85CB91

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report bUBL.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Njrat

Yara Signatures

Initial Sample

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

E-Banking Fraud

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

Windows Analysis Report
bUBL.exe

Function 018303F8 Relevance: 1.6, APIs: 1, Instructions: 104
COMMON

Function 0126B5DE Relevance: 1.6, APIs: 1, Instructions: 103
fileCOMMON

Function 018303E8 Relevance: 1.6, APIs: 1, Instructions: 102
COMMON

Function 05631D7E Relevance: 1.6, APIs: 1, Instructions: 99
registryCOMMON

Function 0126BB4B Relevance: 1.6, APIs: 1, Instructions: 98
registryCOMMON

Function 0126A7C7 Relevance: 1.6, APIs: 1, Instructions: 95
registryCOMMON

Function 0563099C Relevance: 1.6, APIs: 1, Instructions: 93
COMMON

Function 0126A612 Relevance: 1.6, APIs: 1, Instructions: 89
synchronizationCOMMON

Function 05630190 Relevance: 1.6, APIs: 1, Instructions: 89
COMMON

Function 05630894 Relevance: 1.6, APIs: 1, Instructions: 88
timeCOMMON

Function 05631DAA Relevance: 1.6, APIs: 1, Instructions: 86
registryCOMMON

Function 056309BE Relevance: 1.6, APIs: 1, Instructions: 84
COMMON